From 409d669eb1b41a10ecb05f72bf3f2b6ee0afcef2 Mon Sep 17 00:00:00 2001
From: David Benson <david@draw.io>
Date: Wed, 15 Jun 2022 11:55:30 +0100
Subject: [PATCH] Removes authorization forwarding

---
 src/main/java/com/mxgraph/online/ProxyServlet.java | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/src/main/java/com/mxgraph/online/ProxyServlet.java b/src/main/java/com/mxgraph/online/ProxyServlet.java
index bb64970687..5b5f2d6920 100644
--- a/src/main/java/com/mxgraph/online/ProxyServlet.java
+++ b/src/main/java/com/mxgraph/online/ProxyServlet.java
@@ -85,12 +85,6 @@ protected void doGet(HttpServletRequest request,
 				// Workaround for 451 response from Iconfinder CDN
 				connection.setRequestProperty("User-Agent", "draw.io");
 				
-				//Forward auth header
-				if (auth  !=  null)
-				{
-					connection.setRequestProperty("Authorization", auth);
-				}
-
 				if (dom != null && dom.length() > 0)
 				{
 					response.addHeader("Access-Control-Allow-Origin", dom);