Credential disclosure via cross-host redirect authorization forwarding

Credential disclosure in Microsoft typed-rest-client before 1.8.0 allows remote attackers to obtain authentication data through cross-host redirects. The prepareRequest methods in the Basic, Bearer, and Personal Access Token handlers set the Authorization header on redirected requests without comparing the destination host with the original host. Exposure requires an authenticated client request to receive a redirect to a different attacker-observable host, which receives the configured password, bearer token, or personal access token.