wp-includes/SimplePie/src/Misc.php:2173Sanitize a URL by removing HTTP credentials.
$urlstringstring public static function url_remove_credentials($url) { return preg_replace('#^(https?://)[^/:@]+:[^/:@]+@#i', '$1', $url); }Unchanged from 6.7.7 through 7.1.0.
Signature, return type and hooks compared across 5 parsed releases.
src/wp-includes/SimplePie/src/Misc.php, and regenerated for each WordPress release so it tracks the code rather than a snapshot of it.