We shouldn't be sending the data on redirect.

As such, we should remove the body from the old request as well as the
Content-Length header.

diff --git a/requests/sessions.py b/requests/sessions.py
index 8c1152c..7ee6221 100644 (file)
--- a/requests/sessions.py
+++ b/requests/sessions.py
@@ -121,10 +121,13 @@ class SessionRedirectMixin(object):
 
             # Remove the cookie headers that were sent.
             headers = prepared_request.headers
-            try:
-                del headers['Cookie']
-            except KeyError:
-                pass
+            for h in ('Cookie', 'Content-Length'):
+                try:
+                    del headers[h]
+                except KeyError:
+                    pass
+
+            prepared_request.body = None
 
             resp = self.send(
                 prepared_request,