curl/docs/cmdline-opts/location-trusted.md

c	SPDX-License-Identifier	Long	Help	Protocols	Category	Added	Multi	See-also	Example
Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.	curl	location-trusted	As --location, but send secrets to other hosts	HTTP	http auth	7.10.4	boolean	user	--location-trusted -u user:password $URL --location-trusted -H "Cookie session=abc" $URL

--location-trusted

Instructs curl to like --location follow HTTP redirects, but permits it to send credentials and other secrets along to other hosts than the initial one.

This may or may not introduce a security breach if the site redirects you to a site to which you send this sensitive data to. Another host means that one or more of hostname, protocol scheme or port number changed.

This option also allows curl to pass long cookies set explicitly with --header.