wget CVE-2018-20483: Information leak via embedded credentials in extended file attributes

Wget CVE-2018-20483 - HTTP credentials leaked via user.xdg.origin.url xattr

wget --xattr leaks Basic-auth credentials into POSIX xattrs (CVE-2018-20483)

wget CVE-2018-20483: xattr leaks URL userinfo (password) to file metadata