Dio: Cross-origin redirect leaks sensitive request headers in `dio_http2_adapter`

CVE-2026-103030

### Summary `dio_http2_adapter` follows HTTP `Location` redirects without stripping sensitive request headers when the

历史摘要 · 未重新核验 · GitHub Advisory