{"version":"2.1.280","anchor":"new-credential-redacting-url-formatter","canonical_anchor":"new-credential-redacting-url-formatter","heading":"New credential-redacting URL formatter","tier":"internal","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.280\/e\/new-credential-redacting-url-formatter","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.280","markdown":"### New credential-redacting URL formatter\n\nNew helper masks usernames and passwords embedded in URLs before display\n\n**What**\n\nClaude Code has a new function that formats URLs by replacing any embedded username and password with `***`. It handles both standard URLs with credentials and bare `user@host` forms.\n\n**Why**\n\nThis keeps sensitive credentials that are embedded directly in a URL from being shown in logs or on screen in plain text.\n\n- Area: Permissions\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 1\/5"}