Under the hood
New helper masks usernames and passwords embedded in URLs before display
What
Claude Code has a new function that formats URLs by replacing any embedded username and password with ***. It handles both standard URLs with credentials and bare user@host forms.
Why
This keeps sensitive credentials that are embedded directly in a URL from being shown in logs or on screen in plain text.