Fetch Standard change: Authorization removed upon cross-origin redirects #22533
Description
whatwg/fetch#1544 changes the Fetch Standard to remove a web-developer-set Authorization header upon a cross-origin redirect.
This probably ought to be documented.