Keep request URL credentials out of HTTP errors

[Ri-go]

Upstream failures could copy API keys from request URLs into logs and 502 responses. Remove URL credentials, queries and fragments from HTTP error diagnostics while preserving forwarded requests and error classification.

Covers ordinary, hedged and broadcast requests, including wrapped errors and malformed redirects. Tests, race checks, vet and lint pass.

Summary by CodeRabbit

• Bug Fixes
  • Improved error reporting across request forwarding and RPC handling.
  • Sensitive URL information—including credentials, query parameters, and fragments—is now redacted from error messages and logs.
  • Preserved existing HTTP status codes, error classifications, timeout details, and diagnostic context.
  • Added safeguards for malformed, wrapped, and combined errors to prevent accidental disclosure of sensitive request data.

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Essentials

Run ID: 97729f4c-731a-40e1-ac33-2e55a760dd4b

📥 Commits

Reviewing files that changed from the base of the PR and between 8a3b3ff and 53f6f18.

📒 Files selected for processing (7)

• internal/forwarder/broadcast.go
• internal/forwarder/hedge.go
• internal/forwarder/http.go
• internal/forwarder/redaction_test.go
• internal/log/errors.go
• internal/log/errors_test.go
• internal/server/cmt_rpc/server.go

 ____________________________________
< Zero-day? Zero chance on my watch. >
 ------------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}

[linear]

ID-1601