fix: Redact Authorization header before sending events to Sentry

src/Sentry/Protocol/Response.cs

@@ -69,6 +69,11 @@ internal void AddHeaders(IEnumerable<KeyValuePair<string, IEnumerable<string>>>
     {
         foreach (var header in headers)
         {
+            // Always skip the Authorization header - we never want to capture this even if SendDefaultPii is true
+            if (header.Key.Equals("Authorization", StringComparison.OrdinalIgnoreCase))
+            {
+                continue;
+            }
             Headers.Add(
                 header.Key,
                 string.Join("; ", header.Value)

src/Sentry/SentryRequest.cs

@@ -102,6 +102,11 @@ internal void AddHeaders(IEnumerable<KeyValuePair<string, IEnumerable<string>>>
     {
         foreach (var header in headers)
         {
+            // Always skip the Authorization header - we never want to capture this even if SendDefaultPii is true
+            if (header.Key.Equals("Authorization", StringComparison.OrdinalIgnoreCase))
+            {
+                continue;
+            }
             Headers.Add(header.Key, string.Join("; ", header.Value));
         }
     }