Safari 18.2 on Sequoia 15.2 sends repeated Authorization header when iCloud Relay is enabled and the page is reloaded.
-
Inside Safari Preferences -> Privacy -> Hide IP address -> from Trackers and Websites (ensure this is enabled)
-
Visit a website that uses HTTP Authorization and authenticate oneself
-
Reload website a couple of times and it will result in an HTTP 400 error due to repeat Authorization header sent by Safari