From 3a4fc6abfb3b39237f557372262ac79f45b6a9fa Mon Sep 17 00:00:00 2001
From: Michael Mercier <michael.mercier@ryax.tech>
Date: Thu, 11 Mar 2021 18:46:34 +0100
Subject: Replace password in URI by stars if present + test

---
 git/repo/base.py | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

(limited to 'git/repo/base.py')

diff --git a/git/repo/base.py b/git/repo/base.py
index 8f1ef0a6..44e3f859 100644
--- a/git/repo/base.py
+++ b/git/repo/base.py
@@ -969,7 +969,13 @@ class Repo(object):
             handle_process_output(proc, None, progress.new_message_handler(), finalize_process, decode_streams=False)
         else:
             (stdout, stderr) = proc.communicate()
-            log.debug("Cmd(%s)'s unused stdout: %s", getattr(proc, 'args', ''), stdout)
+            cmdline = getattr(proc, 'args', '')
+            uri = cmdline[-2]
+            if "://" in uri and "@" in uri:
+                cred = uri.split("://")[1].split("@")[0].split(":")
+                if len(cred) == 2:
+                    cmdline[-2] = uri.replace(cred[1], "******")
+            log.debug("Cmd(%s)'s unused stdout: %s", cmdline, stdout)
             finalize_process(proc, stderr=stderr)
 
         # our git command could have a different working dir than our actual
-- 
cgit v1.2.1