security: mitigate cross-origin credential leaks, prevent CRLF header injection, and disable XML DTD processing#2170

insaf021 wants to merge 2 commits into

googleapis:maingoogleapis/google-http-java-client:mainfrom

insaf021:security/harden-http-security-credential-crlf-xxeinsaf021/google-http-java-client:security/harden-http-security-credential-crlf-xxeCopy head branch name to clipboard