Index: urllib3-1.22/test/test_retry.py
===================================================================
--- urllib3-1.22.orig/test/test_retry.py
+++ urllib3-1.22/test/test_retry.py
@@ -253,7 +253,7 @@ class TestRetry(object):
     def test_retry_default_remove_headers_on_redirect(self):
         retry = Retry()
 
-        assert list(retry.remove_headers_on_redirect) == ['Authorization']
+        assert sorted(list(retry.remove_headers_on_redirect)) == sorted(["Authorization", "Cookie"])
 
     def test_retry_set_remove_headers_on_redirect(self):
         retry = Retry(remove_headers_on_redirect=['X-API-Secret'])
Index: urllib3-1.22/urllib3/util/retry.py
===================================================================
--- urllib3-1.22.orig/urllib3/util/retry.py
+++ urllib3-1.22/urllib3/util/retry.py
@@ -151,7 +151,7 @@ class Retry(object):
 
     RETRY_AFTER_STATUS_CODES = frozenset([413, 429, 503])
 
-    DEFAULT_REDIRECT_HEADERS_BLACKLIST = frozenset(['Authorization'])
+    DEFAULT_REDIRECT_HEADERS_BLACKLIST = frozenset(['Cookie', 'Authorization'])
 
     #: Maximum backoff time.
     BACKOFF_MAX = 120