{"version":"2.1.268","anchor":"new-url-redaction-helpers-for-stripping-credentialsqueryha","canonical_anchor":"new-url-redaction-helpers-for-stripping-credentialsqueryha","heading":"New URL redaction helpers for stripping credentials\/query\/hash before logging or telemetry","tier":"internal","area":"Elsewhere","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.268\/e\/new-url-redaction-helpers-for-stripping-credentialsqueryha","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.268","markdown":"### New URL redaction helpers for stripping credentials\/query\/hash before logging or telemetry\n\nNew helper functions strip credentials, query strings, and fragments from URLs before they're logged\n\n**What**\n\nClaude Code now has a set of internal helper functions that detect and remove sensitive parts of a URL, such as an embedded username and password (`user:pass@host`), query strings, and fragments, as well as sensitive parts of Windows\/UNC file paths. When found, these are replaced with a fixed placeholder, `[redacted URL]`, before the URL is written to logs or telemetry.\n\n**Why**\n\nThis reduces the chance that credentials or other sensitive data embedded in a URL or file path accidentally end up in logs or diagnostic data.\n\n- Area: Elsewhere\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 1\/5"}