Prevent proxy credential leakage from URL parse errors

[Copilot]

Canonical issue

Outcome

Malformed proxy URLs no longer propagate credential-bearing parse errors, and yt-dlp/transcript failure logs redact proxy userinfo.

Scope

• Included:
  • Validate proxy ports and supported schemes consistently across canonical and standalone helpers.
  • Sanitize transcript, yt-dlp, Whisper, and metadata failure details before logging or returning them.
  • Add regression coverage for malformed URLs, socks5h, helper parity, and credential redaction.
• Explicitly excluded:
  • Broader refactoring of unrelated error logging paths.
  • Production deployment changes.

Example:

try:
    parsed = urllib.parse.urlparse(url)
    valid = parsed.scheme in _ALLOWED_SCHEMES and bool(parsed.hostname)
    if valid:
        _ = parsed.port
except ValueError:
    valid = False

Risk

• Risk level: low
• Failure mode: Invalid proxy configuration falls back to direct connection; diagnostic details remain redacted.
• Rollback: Revert commit 464a68faa5f914687f4057d097341322e9703518.

Verification

Current head: 464a68faa5f914687f4057d097341322e9703518

• Focused tests: python -m pytest -q --no-cov tests/unit/test_proxy_utils.py — 45 passed
• Required CI — pending/action required
• Review threads resolved

Production evidence

Not applicable; this change affects validation and logging behavior only.

Agent handoff

• One canonical issue is linked
• No competing PR implements the same issue
• Acceptance criteria are satisfied
• Required checks pass on the current head
• Human decision is requested only for product, security, irreversible infrastructure, or production approval

• Fixes Prevent proxy credential leakage from urlparse errors #1113

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
v0-uvai	Ready	Preview, v0	Sep 12, 2026 9:37am UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 92aa20ff-a28c-450b-a5a7-9d23140e7c13

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

🔍 PR Validation

⚠️ PR title should follow conventional commits format

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 1e08d12.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

Scanned Files

None