From f3e227ae74280bbecec6e7901c5141d825ab577f Mon Sep 17 00:00:00 2001
From: Lee McDermott <github@leemcdermott.co.uk>
Date: Wed, 26 Dec 2012 05:54:14 +0000
Subject: [PATCH] Mask PHP_AUTH_PW header in profiler

---
 .../HttpKernel/DataCollector/RequestDataCollector.php     | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/Symfony/Component/HttpKernel/DataCollector/RequestDataCollector.php b/src/Symfony/Component/HttpKernel/DataCollector/RequestDataCollector.php
index 6294845c722a2..b57688c13edff 100644
--- a/src/Symfony/Component/HttpKernel/DataCollector/RequestDataCollector.php
+++ b/src/Symfony/Component/HttpKernel/DataCollector/RequestDataCollector.php
@@ -95,6 +95,14 @@ public function collect(Request $request, Response $response, \Exception $except
             'locale'             => $request->getLocale(),
         );
 
+        if (isset($this->data['request_headers']['php-auth-pw'])) {
+            $this->data['request_headers']['php-auth-pw'] = '******';
+        }
+
+        if (isset($this->data['request_server']['PHP_AUTH_PW'])) {
+            $this->data['request_server']['PHP_AUTH_PW'] = '******';
+        }
+
         if (isset($this->controllers[$request])) {
             $controller = $this->controllers[$request];
             if (is_array($controller)) {