Under the hood
Useful3 Signal3
Redaction patterns for credentials, session ids and phone numbers are now concrete constants.
What's wrong with this entry?
Anonymous. No account, no email.
What
The patterns used to scrub sensitive material are now live constants, covering credentials embedded in URLs, long hex blobs, session identifiers, phone numbers and invisible control characters. Which sinks apply which pattern is decided elsewhere in the code.
Evidence
/^(?:session|cse)_[A-Za-z0-9_-]+$/
Strings lifted out of the shipped bundle, so the claim above can be checked against them.