wp-includes/SimplePie/src/Misc.php:2224Sanitize a URL by removing HTTP credentials.
$urlstringstring public static function url_remove_credentials(string $url) { // Cast for PHPStan: I do not think this can fail. // The regex is valid and there should be no backtracking. // https://github.com/phpstan/phpstan/issues/11547 return (string) preg_replace('#^(https?://)[^/:@]+:[^/:@]+@#i', '$1', $url); }Unchanged from 6.7.7 through 7.1.0.
Signature, return type and hooks compared across 5 parsed releases.
src/wp-includes/SimplePie/src/Misc.php, and regenerated for each WordPress release so it tracks the code rather than a snapshot of it.