Mask password in import URL while importing.

2 files changed, 7 insertions, 1 deletions

diff --git a/app/helpers/projects_helper.rb b/app/helpers/projects_helper.rb
index 8350f5dc072..4653b8a2278 100644
--- a/app/helpers/projects_helper.rb
+++ b/app/helpers/projects_helper.rb
@@ -261,4 +261,10 @@ module ProjectsHelper
       project_blob_path(project, tree_join(project.default_branch, project.repository.contribution_guide.name))
     end
   end
+
+  def hidden_pass_url(original_url)
+    result = URI(original_url)
+    result.password = '*****' if result.password.present?
+    result
+  end
 end
diff --git a/app/views/projects/import.html.haml b/app/views/projects/import.html.haml
index 9efb1658c25..649dd56a8d9 100644
--- a/app/views/projects/import.html.haml
+++ b/app/views/projects/import.html.haml
@@ -4,7 +4,7 @@
       %h2
         %i.icon-spinner.icon-spin
         Import in progress.
-      %p.monospace git clone --bare #{@project.import_url}
+      %p.monospace git clone --bare #{hidden_pass_url(@project.import_url)}
       %p Please wait while we import the repository for you. Refresh at will.
       :javascript
         new ProjectImport();