Potential leak of data: URL with Credentials

Detected 1 occurrence(s) of ‘[ht|f]tp[s]*:\/\/\w+\:.*\@\w*\.\w*’: return null; } finally { if(connection != null) { connection.disconnect(); } } } final int PORT = 42; URL url = new URL(str); URL newurl = new URL(url.getProtocol(), url.getHost(), PORT, url.getFile()); http://user:pass@hello.com:1234/path/file.ext?param=value#anchor http://hello.com:42/path/file.ext?param=value Source: http://pastebin.com/raw.php?i=DNf8FbMU