piighost/basic-auth-url

A URL carrying HTTP basic credentials, user:password before the host. The password is in the path a proxy logs and a browser history keeps, which is what makes the whole span worth taking rather than the password alone. Collides with URL on the same start; a group carrying both must declare this one first.

Label: BASIC_AUTH_URL

Pattern

\bhttps?://[^\s:/@]+:[^\s@/]+@[^\s/]*[^\s/.,;:!?)\]]

Must be caught

Must be left alone

Tags: international, secrets, network, software-dev

Download the detector as TOML