[Storage] added headers to redirect cleanup logic

[anjaliratnam-msft]

Added the following encryption headers to the redirect cleanup logic:

• x-ms-encryption-key
• x-ms-encryption-key-sha256
• x-ms-source-encryption-key
• x-ms-source-encryption-key-sha256

[azure-pipelines]

Azure Pipelines:
Successfully started running 1 pipeline(s).
9 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

[Copilot]

Pull request overview

Expands cross-domain redirect cleanup to prevent customer-provided encryption keys from being forwarded.

Changes:

• Adds four encryption headers to all Storage cleanup policies.
• Extends Blob redirect tests to verify their removal.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
azure-storage-queue/.../policies.py	Adds encryption headers to cleanup defaults.
azure-storage-file-share/.../policies.py	Adds encryption headers to cleanup defaults.
azure-storage-file-datalake/.../policies.py	Adds encryption headers to cleanup defaults.
azure-storage-blob/.../policies.py	Adds encryption headers to cleanup defaults.
azure-storage-blob/tests/test_sensitive_redirect.py	Tests cleanup of the added headers.

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.