Strip-Authorization-on-cross-origin-redirect-CVE-202.patch
Refuse-https-http-downgrade-redirects-by-default.patch
