Hide the password to prevent it being accidently displayed

[Baptouuuu]

Problem

While testing innmind/s3 an error occurred and displayed the bucket object along its url. The url contained the bucket password. Since this is a sensitive value it should never be exposed.

Solution

Wrap the password string inside a SensitiveParameterValue so tools like var_dump, symfony/var-dumper or loggers know the value should not be displayed.

Note

The password is still exposed when building the Password object as a parameter or the exception. The exception is not modified for backward compatibility. The parameters are not flagged as SensitiveParameter to help developers debug their code, this is relatively safe as most Urls should be built at compile time (where any exception should not be displayed to end users) and the ones built at runtime should be wrapped inside a try/catch (and once again not expose the exception message).

These decisions may change in a future major version if feedback suggest it's better to hide everything.

[codecov]

Welcome to Codecov 🎉

Once you merge this PR into your default branch, you're all set! Codecov will compare coverage reports and display results in all future pull requests.

Thanks for integrating Codecov - We've got you covered ☂️