Replace the userinfo of a URL (https://user:secret@host/...) with ***, so a
credential in a base URL never reaches an error message, a log or CI output.
A value that does not parse as a URL (a port typo, an unencoded "#" in the
password) or has no scheme (user:pw@host) is cut by text instead
(credentialsIn + redactCredentials); one without userinfo is returned unchanged.
Replace the userinfo of a URL (
https://user:secret@host/...) with***, so a credential in a base URL never reaches an error message, a log or CI output. A value that does not parse as a URL (a port typo, an unencoded "#" in the password) or has no scheme (user:pw@host) is cut by text instead (credentialsIn+redactCredentials); one without userinfo is returned unchanged.