You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
PluginsArea: what it touches
Bug FixesKind: in v2.1.268,
Bug FixesSection of the release
What
When a plugin loaded from a URL fails to load, the resulting error message used to only strip out query strings from that URL before showing it. Now a new helper scans the whole message for embedded URLs and also masks any segment that looks like it contains login credentials (matching an @ sign next to quote or bracket characters), in addition to still stripping query strings.
Why
This reduces the chance that a plugin load-failure message accidentally displays a URL containing a username, password, or token.
