security: Reject cross-host redirects to prevent Authorization leak#4171

gmlewis merged 1 commit intogoogle:mastergoogle/go-github:masterfrom

mohammadmseet-hue:fix/redirect-auth-leakmohammadmseet-hue/go-github:fix/redirect-auth-leakCopy head branch name to clipboard