Prevent proxy credential leakage from URL parse errors

[Copilot]

Canonical issue

Outcome

Malformed proxy URLs no longer propagate credential-bearing parse errors, and yt-dlp/transcript failure logs redact proxy userinfo.

Scope

• Included:
  • Validate proxy ports and supported schemes consistently across canonical and standalone helpers.
  • Sanitize transcript, yt-dlp, Whisper, and metadata failure details before logging or returning them.
  • Add regression coverage for malformed URLs, socks5h, helper parity, and credential redaction.
• Explicitly excluded:
  • Broader refactoring of unrelated error logging paths.
  • Production deployment changes.

Example:

try:
    parsed = urllib.parse.urlparse(url)
    valid = parsed.scheme in _ALLOWED_SCHEMES and bool(parsed.hostname)
    if valid:
        _ = parsed.port
except ValueError:
    valid = False

Risk

• Risk level: low
• Failure mode: Invalid proxy configuration falls back to direct connection; diagnostic details remain redacted.
• Rollback: Revert commit 464a68faa5f914687f4057d097341322e9703518.

Verification

Current head: 464a68faa5f914687f4057d097341322e9703518

• Focused tests: python -m pytest -q --no-cov tests/unit/test_proxy_utils.py — 45 passed
• Required CI — pending/action required
• Review threads resolved

Production evidence

Not applicable; this change affects validation and logging behavior only.

Agent handoff

• One canonical issue is linked
• No competing PR implements the same issue
• Acceptance criteria are satisfied
• Required checks pass on the current head
• Human decision is requested only for product, security, irreversible infrastructure, or production approval

• Fixes Prevent proxy credential leakage from urlparse errors #1113

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
v0-uvai	Ready	Preview, v0	Sep 8, 2026 11:23pm UTC