aiohttp fix: drop malicious Host/Origin headers on redirect to prevent SSRF

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.