curl.1: add warning when using -H and redirects

diff --git a/docs/curl.1 b/docs/curl.1
index af5d5f348de438728ddf876dff237d9814475e4d..8b2d3f8cc1b2ad1c250137bf09ceb8a86d6702ae 100644 (file)
--- a/docs/curl.1
+++ b/docs/curl.1
@@ -743,6 +743,12 @@ Example:
 
 \&# curl -H "X-First-Name: Joe" http://192.168.0.1/
 
+\fBWARNING\fP: headers set with this option will be set in all requests - even
+after redirects are followed, like when told with \fB-L, --location\fP. This
+can lead to the header being sent to other hosts than the original host, so
+sensitive headers should be used with caution combined with following
+redirects.
+
 This option can be used multiple times to add/replace/remove multiple headers.
 .IP "--hostpubmd5 <md5>"
 (SCP/SFTP) Pass a string containing 32 hexadecimal digits. The string should