A database URL carrying its password, the form an application reads from an environment variable and a traceback prints whole. The span stops at the host, so the database name and the query string are left in clear, which is what makes a redacted log still readable.
Label: DB_CONNECTION_STRING
\b(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|amqp)://[^\s:/@]+:[^\s@/]+@[^\s/]*[^\s/.,;:!?)\]]L'application se connecte via postgres://app_user:MotDePasse123@db.prod.interne:5432/facturation au démarrage. → postgres://app_user:MotDePasse123@db.prod.interne:5432postgres://db.prod.interne:5432/facturationhttps://user:pass@example.comTags: international, secrets, network, software-dev