fix: Header construction vulnerability

          parsed = URI.parse(endpoint)

          headers = {}

          # add basic auth header only when both user and password are setup correctly

          user = parsed.user

          password = parsed.password

          headers["Authorization"] = "Basic #{Base64.strict_encode64("#{user}:#{password}")}" if user.present? && password.present?

          if user.present? && password.present?

            credentials = Base64.strict_encode64("#{CGI.unescape(user)}:#{CGI.unescape(password)}")

            headers["Authorization"] = "Basic #{credentials}"

          end

          headers

        end