Derrick Stolee <derrickstolee@xxxxxxxxxx> writes: > Yes, you're right. I should use the output 'struct url_inf' from > url_normalize() to construct the redacted URL. It has the downside > that the output URL can be slightly different from the input URL, > but a user should still be able to diagnose how to resolve the > situation. Ah, the error message is based on pre-normalization which may very well be different, as that is the whole point of normalization ;-) We'd redact password part in the error message anyway, so it may not be a huge deal.