A URL without the credentials it carries: a parsed URL loses its userinfo, and a value
that doesn't parse — or parses only with a fake scheme, as user:pw@host does (scheme
user:) — has the exact userinfo replaced by ***. The value is a URL by definition
here, so one typed without its scheme is read as if it had one (credentialsIn alone
takes a bare a:b@c for no credential). OParl access is anonymous: the client drops
every user:password@ before it sends a request, and this keeps it out of messages too.
A URL without the credentials it carries: a parsed URL loses its userinfo, and a value that doesn't parse — or parses only with a fake scheme, as
user:pw@hostdoes (schemeuser:) — has the exact userinfo replaced by***. The value is a URL by definition here, so one typed without its scheme is read as if it had one (credentialsInalone takes a barea:b@cfor no credential). OParl access is anonymous: the client drops everyuser:password@before it sends a request, and this keeps it out of messages too.