Mark DSNs as #[SensitiveParameter]

nicolas-grekas · nicolas-grekas · commit a27c87b5dc36 · 2023-01-22T15:14:08.000+01:00
diff --git a/src/Symfony/Component/Cache/Adapter/AbstractAdapter.php b/src/Symfony/Component/Cache/Adapter/AbstractAdapter.php
@@ -110,7 +110,7 @@ public static function createSystemCache(string $namespace, int $defaultLifetime
         return new ChainAdapter([$apcu, $opcache]);
     }
 
-    public static function createConnection(string $dsn, array $options = [])
+    public static function createConnection(#[\SensitiveParameter] string $dsn, array $options = [])
     {
         if (str_starts_with($dsn, 'redis:') || str_starts_with($dsn, 'rediss:')) {
             return RedisAdapter::createConnection($dsn, $options);
diff --git a/src/Symfony/Component/Cache/Adapter/CouchbaseBucketAdapter.php b/src/Symfony/Component/Cache/Adapter/CouchbaseBucketAdapter.php
@@ -54,7 +54,7 @@ public function __construct(\CouchbaseBucket $bucket, string $namespace = '', in
         $this->marshaller = $marshaller ?? new DefaultMarshaller();
     }
 
-    public static function createConnection(array|string $servers, array $options = []): \CouchbaseBucket
+    public static function createConnection(#[\SensitiveParameter] array|string $servers, array $options = []): \CouchbaseBucket
     {
         if (\is_string($servers)) {
             $servers = [$servers];
diff --git a/src/Symfony/Component/Cache/Adapter/CouchbaseCollectionAdapter.php b/src/Symfony/Component/Cache/Adapter/CouchbaseCollectionAdapter.php
@@ -47,7 +47,7 @@ public function __construct(Collection $connection, string $namespace = '', int
         $this->marshaller = $marshaller ?? new DefaultMarshaller();
     }
 
-    public static function createConnection(array|string $dsn, array $options = []): Bucket|Collection
+    public static function createConnection(#[\SensitiveParameter] array|string $dsn, array $options = []): Bucket|Collection
     {
         if (\is_string($dsn)) {
             $dsn = [$dsn];
diff --git a/src/Symfony/Component/Cache/Adapter/MemcachedAdapter.php b/src/Symfony/Component/Cache/Adapter/MemcachedAdapter.php
@@ -92,7 +92,7 @@ public static function isSupported()
      *
      * @throws \ErrorException When invalid options or servers are provided
      */
-    public static function createConnection(array|string $servers, array $options = []): \Memcached
+    public static function createConnection(#[\SensitiveParameter] array|string $servers, array $options = []): \Memcached
     {
         if (\is_string($servers)) {
             $servers = [$servers];
diff --git a/src/Symfony/Component/Cache/Adapter/PdoAdapter.php b/src/Symfony/Component/Cache/Adapter/PdoAdapter.php
@@ -55,7 +55,7 @@ class PdoAdapter extends AbstractAdapter implements PruneableInterface
      * @throws InvalidArgumentException When PDO error mode is not PDO::ERRMODE_EXCEPTION
      * @throws InvalidArgumentException When namespace contains invalid characters
      */
-    public function __construct(\PDO|string $connOrDsn, string $namespace = '', int $defaultLifetime = 0, array $options = [], MarshallerInterface $marshaller = null)
+    public function __construct(#[\SensitiveParameter] \PDO|string $connOrDsn, string $namespace = '', int $defaultLifetime = 0, array $options = [], MarshallerInterface $marshaller = null)
     {
         if (\is_string($connOrDsn) && str_contains($connOrDsn, '://')) {
             throw new InvalidArgumentException(sprintf('Usage of Doctrine DBAL URL with "%s" is not supported. Use a PDO DSN or "%s" instead. Got "%s".', __CLASS__, DoctrineDbalAdapter::class, $connOrDsn));
diff --git a/src/Symfony/Component/Cache/Traits/RedisTrait.php b/src/Symfony/Component/Cache/Traits/RedisTrait.php
@@ -80,7 +80,7 @@ private function init(\Redis|\RedisArray|\RedisCluster|\Predis\ClientInterface $
      *
      * @throws InvalidArgumentException when the DSN is invalid
      */
-    public static function createConnection(string $dsn, array $options = []): \Redis|\RedisArray|\RedisCluster|\Predis\ClientInterface
+    public static function createConnection(#[\SensitiveParameter] string $dsn, array $options = []): \Redis|\RedisArray|\RedisCluster|\Predis\ClientInterface
     {
         if (str_starts_with($dsn, 'redis:')) {
             $scheme = 'redis';
diff --git a/src/Symfony/Component/HttpFoundation/Session/Storage/Handler/PdoSessionHandler.php b/src/Symfony/Component/HttpFoundation/Session/Storage/Handler/PdoSessionHandler.php
@@ -151,7 +151,7 @@ class PdoSessionHandler extends AbstractSessionHandler
      *
      * @throws \InvalidArgumentException When PDO error mode is not PDO::ERRMODE_EXCEPTION
      */
-    public function __construct(\PDO|string $pdoOrDsn = null, array $options = [])
+    public function __construct(#[\SensitiveParameter] \PDO|string $pdoOrDsn = null, array $options = [])
     {
         if ($pdoOrDsn instanceof \PDO) {
             if (\PDO::ERRMODE_EXCEPTION !== $pdoOrDsn->getAttribute(\PDO::ATTR_ERRMODE)) {
@@ -415,7 +415,7 @@ public function close(): bool
     /**
      * Lazy-connects to the database.
      */
-    private function connect(string $dsn): void
+    private function connect(#[\SensitiveParameter] string $dsn): void
     {
         $this->pdo = new \PDO($dsn, $this->username, $this->password, $this->connectionOptions);
         $this->pdo->setAttribute(\PDO::ATTR_ERRMODE, \PDO::ERRMODE_EXCEPTION);
@@ -427,7 +427,7 @@ private function connect(string $dsn): void
      *
      * @todo implement missing support for oci DSN (which look totally different from other PDO ones)
      */
-    private function buildDsnFromUrl(string $dsnOrUrl): string
+    private function buildDsnFromUrl(#[\SensitiveParameter] string $dsnOrUrl): string
     {
         // (pdo_)?sqlite3?:///... => (pdo_)?sqlite3?://localhost/... or else the URL will be invalid
         $url = preg_replace('#^((?:pdo_)?sqlite3?):///#', '$1://localhost/', $dsnOrUrl);
diff --git a/src/Symfony/Component/Lock/Store/DoctrineDbalPostgreSqlStore.php b/src/Symfony/Component/Lock/Store/DoctrineDbalPostgreSqlStore.php
@@ -38,7 +38,7 @@ class DoctrineDbalPostgreSqlStore implements BlockingSharedLockStoreInterface, B
      *
      * @throws InvalidArgumentException When first argument is not Connection nor string
      */
-    public function __construct(Connection|string $connOrUrl)
+    public function __construct(#[\SensitiveParameter] Connection|string $connOrUrl)
     {
         if ($connOrUrl instanceof Connection) {
             if (!$connOrUrl->getDatabasePlatform() instanceof PostgreSQLPlatform) {
@@ -243,7 +243,7 @@ private function unlockShared(Key $key): void
      *
      * @throws InvalidArgumentException when driver is not supported
      */
-    private function filterDsn(string $dsn): string
+    private function filterDsn(#[\SensitiveParameter] string $dsn): string
     {
         if (!str_contains($dsn, '://')) {
             throw new InvalidArgumentException(sprintf('String "%" is not a valid DSN for Doctrine DBAL.', $dsn));
diff --git a/src/Symfony/Component/Lock/Store/PdoStore.php b/src/Symfony/Component/Lock/Store/PdoStore.php
@@ -64,7 +64,7 @@ class PdoStore implements PersistingStoreInterface
      * @throws InvalidArgumentException When PDO error mode is not PDO::ERRMODE_EXCEPTION
      * @throws InvalidArgumentException When the initial ttl is not valid
      */
-    public function __construct(\PDO|string $connOrDsn, array $options = [], float $gcProbability = 0.01, int $initialTtl = 300)
+    public function __construct(#[\SensitiveParameter] \PDO|string $connOrDsn, #[\SensitiveParameter] array $options = [], float $gcProbability = 0.01, int $initialTtl = 300)
     {
         $this->init($options, $gcProbability, $initialTtl);
 
diff --git a/src/Symfony/Component/Lock/Store/PostgreSqlStore.php b/src/Symfony/Component/Lock/Store/PostgreSqlStore.php
@@ -49,7 +49,7 @@ class PostgreSqlStore implements BlockingSharedLockStoreInterface, BlockingStore
      * @throws InvalidArgumentException When PDO error mode is not PDO::ERRMODE_EXCEPTION
      * @throws InvalidArgumentException When namespace contains invalid characters
      */
-    public function __construct(\PDO|string $connOrDsn, array $options = [])
+    public function __construct(#[\SensitiveParameter] \PDO|string $connOrDsn, #[\SensitiveParameter] array $options = [])
     {
         if ($connOrDsn instanceof \PDO) {
             if (\PDO::ERRMODE_EXCEPTION !== $connOrDsn->getAttribute(\PDO::ATTR_ERRMODE)) {
diff --git a/src/Symfony/Component/Lock/Store/ZookeeperStore.php b/src/Symfony/Component/Lock/Store/ZookeeperStore.php
@@ -34,7 +34,7 @@ public function __construct(\Zookeeper $zookeeper)
         $this->zookeeper = $zookeeper;
     }
 
-    public static function createConnection(string $dsn): \Zookeeper
+    public static function createConnection(#[\SensitiveParameter] string $dsn): \Zookeeper
     {
         if (!str_starts_with($dsn, 'zookeeper:')) {
             throw new InvalidArgumentException(sprintf('Unsupported DSN: "%s".', $dsn));
diff --git a/src/Symfony/Component/Mailer/Transport.php b/src/Symfony/Component/Mailer/Transport.php
@@ -58,14 +58,14 @@ final class Transport
 
     private iterable $factories;
 
-    public static function fromDsn(string $dsn, EventDispatcherInterface $dispatcher = null, HttpClientInterface $client = null, LoggerInterface $logger = null): TransportInterface
+    public static function fromDsn(#[\SensitiveParameter] string $dsn, EventDispatcherInterface $dispatcher = null, HttpClientInterface $client = null, LoggerInterface $logger = null): TransportInterface
     {
         $factory = new self(iterator_to_array(self::getDefaultFactories($dispatcher, $client, $logger)));
 
         return $factory->fromString($dsn);
     }
 
-    public static function fromDsns(array $dsns, EventDispatcherInterface $dispatcher = null, HttpClientInterface $client = null, LoggerInterface $logger = null): TransportInterface
+    public static function fromDsns(#[\SensitiveParameter] array $dsns, EventDispatcherInterface $dispatcher = null, HttpClientInterface $client = null, LoggerInterface $logger = null): TransportInterface
     {
         $factory = new self(iterator_to_array(self::getDefaultFactories($dispatcher, $client, $logger)));
 
@@ -80,7 +80,7 @@ public function __construct(iterable $factories)
         $this->factories = $factories;
     }
 
-    public function fromStrings(array $dsns): Transports
+    public function fromStrings(#[\SensitiveParameter] array $dsns): Transports
     {
         $transports = [];
         foreach ($dsns as $name => $dsn) {
@@ -90,7 +90,7 @@ public function fromStrings(array $dsns): Transports
         return new Transports($transports);
     }
 
-    public function fromString(string $dsn): TransportInterface
+    public function fromString(#[\SensitiveParameter] string $dsn): TransportInterface
     {
         [$transport, $offset] = $this->parseDsn($dsn);
         if ($offset !== \strlen($dsn)) {
@@ -100,7 +100,7 @@ public function fromString(string $dsn): TransportInterface
         return $transport;
     }
 
-    private function parseDsn(string $dsn, int $offset = 0): array
+    private function parseDsn(#[\SensitiveParameter] string $dsn, int $offset = 0): array
     {
         static $keywords = [
             'failover' => FailoverTransport::class,
diff --git a/src/Symfony/Component/Mailer/Transport/AbstractTransportFactory.php b/src/Symfony/Component/Mailer/Transport/AbstractTransportFactory.php
@@ -41,21 +41,11 @@ abstract protected function getSupportedSchemes(): array;
 
     protected function getUser(Dsn $dsn): string
     {
-        $user = $dsn->getUser();
-        if (null === $user) {
-            throw new IncompleteDsnException('User is not set.');
-        }
-
-        return $user;
+        return $dsn->getUser() ?? throw new IncompleteDsnException('User is not set.');
     }
 
     protected function getPassword(Dsn $dsn): string
     {
-        $password = $dsn->getPassword();
-        if (null === $password) {
-            throw new IncompleteDsnException('Password is not set.');
-        }
-
-        return $password;
+        return $dsn->getPassword() ?? throw new IncompleteDsnException('Password is not set.');
     }
 }
diff --git a/src/Symfony/Component/Mailer/Transport/Dsn.php b/src/Symfony/Component/Mailer/Transport/Dsn.php
@@ -35,7 +35,7 @@ public function __construct(string $scheme, string $host, string $user = null, #
         $this->options = $options;
     }
 
-    public static function fromString(string $dsn): self
+    public static function fromString(#[\SensitiveParameter] string $dsn): self
     {
         if (false === $parsedDsn = parse_url($dsn)) {
             throw new InvalidArgumentException(sprintf('The "%s" mailer DSN is invalid.', $dsn));
diff --git a/src/Symfony/Component/Messenger/Bridge/AmazonSqs/Transport/AmazonSqsTransportFactory.php b/src/Symfony/Component/Messenger/Bridge/AmazonSqs/Transport/AmazonSqsTransportFactory.php
@@ -28,14 +28,14 @@ public function __construct(LoggerInterface $logger = null)
         $this->logger = $logger;
     }
 
-    public function createTransport(string $dsn, array $options, SerializerInterface $serializer): TransportInterface
+    public function createTransport(#[\SensitiveParameter] string $dsn, array $options, SerializerInterface $serializer): TransportInterface
     {
         unset($options['transport_name']);
 
         return new AmazonSqsTransport(Connection::fromDsn($dsn, $options, null, $this->logger), $serializer);
     }
 
-    public function supports(string $dsn, array $options): bool
+    public function supports(#[\SensitiveParameter] string $dsn, array $options): bool
     {
         return str_starts_with($dsn, 'sqs://') || preg_match('#^https://sqs\.[\w\-]+\.amazonaws\.com/.+#', $dsn);
     }
diff --git a/src/Symfony/Component/Messenger/Bridge/AmazonSqs/Transport/Connection.php b/src/Symfony/Component/Messenger/Bridge/AmazonSqs/Transport/Connection.php
@@ -99,7 +99,7 @@ public function __destruct()
      * * auto_setup: Whether the queue should be created automatically during send / get (Default: true)
      * * debug: Log all HTTP requests and responses as LoggerInterface::DEBUG (Default: false)
      */
-    public static function fromDsn(string $dsn, array $options = [], HttpClientInterface $client = null, LoggerInterface $logger = null): self
+    public static function fromDsn(#[\SensitiveParameter] string $dsn, array $options = [], HttpClientInterface $client = null, LoggerInterface $logger = null): self
     {
         if (false === $parsedUrl = parse_url($dsn)) {
             throw new InvalidArgumentException(sprintf('The given Amazon SQS DSN "%s" is invalid.', $dsn));
diff --git a/src/Symfony/Component/Messenger/Bridge/Amqp/Transport/AmqpTransportFactory.php b/src/Symfony/Component/Messenger/Bridge/Amqp/Transport/AmqpTransportFactory.php
@@ -20,14 +20,14 @@
  */
 class AmqpTransportFactory implements TransportFactoryInterface
 {
-    public function createTransport(string $dsn, array $options, SerializerInterface $serializer): TransportInterface
+    public function createTransport(#[\SensitiveParameter] string $dsn, array $options, SerializerInterface $serializer): TransportInterface
     {
         unset($options['transport_name']);
 
         return new AmqpTransport(Connection::fromDsn($dsn, $options), $serializer);
     }
 
-    public function supports(string $dsn, array $options): bool
+    public function supports(#[\SensitiveParameter] string $dsn, array $options): bool
     {
         return str_starts_with($dsn, 'amqp://') || str_starts_with($dsn, 'amqps://');
     }
diff --git a/src/Symfony/Component/Messenger/Bridge/Amqp/Transport/Connection.php b/src/Symfony/Component/Messenger/Bridge/Amqp/Transport/Connection.php
@@ -160,7 +160,7 @@ public function __construct(array $connectionOptions, array $exchangeOptions, ar
      *     * verify: Enable or disable peer verification. If peer verification is enabled then the common name in the
      *       server certificate must match the server name. Peer verification is enabled by default.
      */
-    public static function fromDsn(string $dsn, array $options = [], AmqpFactory $amqpFactory = null): self
+    public static function fromDsn(#[\SensitiveParameter] string $dsn, array $options = [], AmqpFactory $amqpFactory = null): self
     {
         if (false === $parsedUrl = parse_url($dsn)) {
             // this is a valid URI that parse_url cannot handle when you want to pass all parameters as options
diff --git a/src/Symfony/Component/Messenger/Bridge/Beanstalkd/Transport/BeanstalkdTransportFactory.php b/src/Symfony/Component/Messenger/Bridge/Beanstalkd/Transport/BeanstalkdTransportFactory.php
@@ -20,14 +20,14 @@
  */
 class BeanstalkdTransportFactory implements TransportFactoryInterface
 {
-    public function createTransport(string $dsn, array $options, SerializerInterface $serializer): TransportInterface
+    public function createTransport(#[\SensitiveParameter] string $dsn, array $options, SerializerInterface $serializer): TransportInterface
     {
         unset($options['transport_name']);
 
         return new BeanstalkdTransport(Connection::fromDsn($dsn, $options), $serializer);
     }
 
-    public function supports(string $dsn, array $options): bool
+    public function supports(#[\SensitiveParameter] string $dsn, array $options): bool
     {
         return str_starts_with($dsn, 'beanstalkd://');
     }
diff --git a/src/Symfony/Component/Messenger/Bridge/Beanstalkd/Transport/Connection.php b/src/Symfony/Component/Messenger/Bridge/Beanstalkd/Transport/Connection.php
@@ -55,7 +55,7 @@ public function __construct(array $configuration, PheanstalkInterface $client)
         $this->ttr = $this->configuration['ttr'];
     }
 
-    public static function fromDsn(string $dsn, array $options = []): self
+    public static function fromDsn(#[\SensitiveParameter] string $dsn, array $options = []): self
     {
         if (false === $components = parse_url($dsn)) {
             throw new InvalidArgumentException(sprintf('The given Beanstalkd DSN "%s" is invalid.', $dsn));
diff --git a/src/Symfony/Component/Messenger/Bridge/Doctrine/Transport/Connection.php b/src/Symfony/Component/Messenger/Bridge/Doctrine/Transport/Connection.php
@@ -84,7 +84,7 @@ public function getConfiguration(): array
         return $this->configuration;
     }
 
-    public static function buildConfiguration(string $dsn, array $options = []): array
+    public static function buildConfiguration(#[\SensitiveParameter] string $dsn, array $options = []): array
     {
         if (false === $components = parse_url($dsn)) {
             throw new InvalidArgumentException(sprintf('The given Doctrine Messenger DSN "%s" is invalid.', $dsn));
diff --git a/src/Symfony/Component/Messenger/Bridge/Doctrine/Transport/DoctrineTransportFactory.php b/src/Symfony/Component/Messenger/Bridge/Doctrine/Transport/DoctrineTransportFactory.php
@@ -30,7 +30,7 @@ public function __construct(ConnectionRegistry $registry)
         $this->registry = $registry;
     }
 
-    public function createTransport(string $dsn, array $options, SerializerInterface $serializer): TransportInterface
+    public function createTransport(#[\SensitiveParameter] string $dsn, array $options, SerializerInterface $serializer): TransportInterface
     {
         $useNotify = ($options['use_notify'] ?? true);
         unset($options['transport_name'], $options['use_notify']);
@@ -52,7 +52,7 @@ public function createTransport(string $dsn, array $options, SerializerInterface
         return new DoctrineTransport($connection, $serializer);
     }
 
-    public function supports(string $dsn, array $options): bool
+    public function supports(#[\SensitiveParameter] string $dsn, array $options): bool
     {
         return str_starts_with($dsn, 'doctrine://');
     }
diff --git a/src/Symfony/Component/Messenger/Bridge/Redis/Transport/Connection.php b/src/Symfony/Component/Messenger/Bridge/Redis/Transport/Connection.php
@@ -157,7 +157,7 @@ private static function initializeRedisCluster(?\RedisCluster $redis, array $hos
         return $redis;
     }
 
-    public static function fromDsn(string $dsn, array $options = [], \Redis|\RedisCluster $redis = null): self
+    public static function fromDsn(#[\SensitiveParameter] string $dsn, array $options = [], \Redis|\RedisCluster $redis = null): self
     {
         if (!str_contains($dsn, ',')) {
             $parsedUrl = self::parseDsn($dsn, $options);
diff --git a/src/Symfony/Component/Messenger/Bridge/Redis/Transport/RedisTransportFactory.php b/src/Symfony/Component/Messenger/Bridge/Redis/Transport/RedisTransportFactory.php
@@ -21,14 +21,14 @@
  */
 class RedisTransportFactory implements TransportFactoryInterface
 {
-    public function createTransport(string $dsn, array $options, SerializerInterface $serializer): TransportInterface
+    public function createTransport(#[\SensitiveParameter] string $dsn, array $options, SerializerInterface $serializer): TransportInterface
     {
         unset($options['transport_name']);
 
         return new RedisTransport(Connection::fromDsn($dsn, $options), $serializer);
     }
 
-    public function supports(string $dsn, array $options): bool
+    public function supports(#[\SensitiveParameter] string $dsn, array $options): bool
     {
         return str_starts_with($dsn, 'redis://') || str_starts_with($dsn, 'rediss://');
     }
diff --git a/src/Symfony/Component/Messenger/Transport/Sync/SyncTransportFactory.php b/src/Symfony/Component/Messenger/Transport/Sync/SyncTransportFactory.php
@@ -28,12 +28,12 @@ public function __construct(MessageBusInterface $messageBus)
         $this->messageBus = $messageBus;
     }
 
-    public function createTransport(string $dsn, array $options, SerializerInterface $serializer): TransportInterface
+    public function createTransport(#[\SensitiveParameter] string $dsn, array $options, SerializerInterface $serializer): TransportInterface
     {
         return new SyncTransport($this->messageBus);
     }
 
-    public function supports(string $dsn, array $options): bool
+    public function supports(#[\SensitiveParameter] string $dsn, array $options): bool
     {
         return str_starts_with($dsn, 'sync://');
     }
diff --git a/src/Symfony/Component/Messenger/Transport/TransportFactory.php b/src/Symfony/Component/Messenger/Transport/TransportFactory.php
@@ -29,7 +29,7 @@ public function __construct(iterable $factories)
         $this->factories = $factories;
     }
 
-    public function createTransport(string $dsn, array $options, SerializerInterface $serializer): TransportInterface
+    public function createTransport(#[\SensitiveParameter] string $dsn, array $options, SerializerInterface $serializer): TransportInterface
     {
         foreach ($this->factories as $factory) {
             if ($factory->supports($dsn, $options)) {
@@ -54,7 +54,7 @@ public function createTransport(string $dsn, array $options, SerializerInterface
         throw new InvalidArgumentException(sprintf('No transport supports the given Messenger DSN "%s".%s.', $dsn, $packageSuggestion));
     }
 
-    public function supports(string $dsn, array $options): bool
+    public function supports(#[\SensitiveParameter] string $dsn, array $options): bool
     {
         foreach ($this->factories as $factory) {
             if ($factory->supports($dsn, $options)) {
diff --git a/src/Symfony/Component/Messenger/Transport/TransportFactoryInterface.php b/src/Symfony/Component/Messenger/Transport/TransportFactoryInterface.php
@@ -20,7 +20,7 @@
  */
 interface TransportFactoryInterface
 {
-    public function createTransport(string $dsn, array $options, SerializerInterface $serializer): TransportInterface;
+    public function createTransport(#[\SensitiveParameter] string $dsn, array $options, SerializerInterface $serializer): TransportInterface;
 
-    public function supports(string $dsn, array $options): bool;
+    public function supports(#[\SensitiveParameter] string $dsn, array $options): bool;
 }
diff --git a/src/Symfony/Component/Notifier/Transport.php b/src/Symfony/Component/Notifier/Transport.php
diff --git a/src/Symfony/Component/Notifier/Transport/AbstractTransportFactory.php b/src/Symfony/Component/Notifier/Transport/AbstractTransportFactory.php
diff --git a/src/Symfony/Component/Notifier/Transport/Dsn.php b/src/Symfony/Component/Notifier/Transport/Dsn.php
diff --git a/src/Symfony/Component/Translation/Provider/AbstractProviderFactory.php b/src/Symfony/Component/Translation/Provider/AbstractProviderFactory.php
diff --git a/src/Symfony/Component/Translation/Provider/Dsn.php b/src/Symfony/Component/Translation/Provider/Dsn.php

Original file line number	Diff line number	Diff line change
`@@ -110,7 +110,7 @@ public static function createSystemCache(string $namespace, int $defaultLifetime`
`110`	`110`	`return new ChainAdapter([$apcu, $opcache]);`
`111`	`111`	`}`
`112`	`112`
`113`		`- public static function createConnection(string $dsn, array $options = [])`
	`113`	`+ public static function createConnection(#[\SensitiveParameter] string $dsn, array $options = [])`
`114`	`114`	`{`
`115`	`115`	`if (str_starts_with($dsn, 'redis:') \|\| str_starts_with($dsn, 'rediss:')) {`
`116`	`116`	`return RedisAdapter::createConnection($dsn, $options);`
Original file line number	Diff line number	Diff line change
`@@ -54,7 +54,7 @@ public function __construct(\CouchbaseBucket $bucket, string $namespace = '', in`
`54`	`54`	`$this->marshaller = $marshaller ?? new DefaultMarshaller();`
`55`	`55`	`}`
`56`	`56`
`57`		`- public static function createConnection(array\|string $servers, array $options = []): \CouchbaseBucket`
	`57`	`+ public static function createConnection(#[\SensitiveParameter] array\|string $servers, array $options = []): \CouchbaseBucket`
`58`	`58`	`{`
`59`	`59`	`if (\is_string($servers)) {`
`60`	`60`	`$servers = [$servers];`
Original file line number	Diff line number	Diff line change
`@@ -47,7 +47,7 @@ public function __construct(Collection $connection, string $namespace = '', int`
`47`	`47`	`$this->marshaller = $marshaller ?? new DefaultMarshaller();`
`48`	`48`	`}`
`49`	`49`
`50`		`- public static function createConnection(array\|string $dsn, array $options = []): Bucket\|Collection`
	`50`	`+ public static function createConnection(#[\SensitiveParameter] array\|string $dsn, array $options = []): Bucket\|Collection`
`51`	`51`	`{`
`52`	`52`	`if (\is_string($dsn)) {`
`53`	`53`	`$dsn = [$dsn];`
Original file line number	Diff line number	Diff line change
`@@ -92,7 +92,7 @@ public static function isSupported()`
`92`	`92`	`*`
`93`	`93`	`* @throws \ErrorException When invalid options or servers are provided`
`94`	`94`	`*/`
`95`		`- public static function createConnection(array\|string $servers, array $options = []): \Memcached`
	`95`	`+ public static function createConnection(#[\SensitiveParameter] array\|string $servers, array $options = []): \Memcached`
`96`	`96`	`{`
`97`	`97`	`if (\is_string($servers)) {`
`98`	`98`	`$servers = [$servers];`
Original file line number	Diff line number	Diff line change
`@@ -55,7 +55,7 @@ class PdoAdapter extends AbstractAdapter implements PruneableInterface`
`55`	`55`	`* @throws InvalidArgumentException When PDO error mode is not PDO::ERRMODE_EXCEPTION`
`56`	`56`	`* @throws InvalidArgumentException When namespace contains invalid characters`
`57`	`57`	`*/`
`58`		`- public function __construct(\PDO\|string $connOrDsn, string $namespace = '', int $defaultLifetime = 0, array $options = [], MarshallerInterface $marshaller = null)`
	`58`	`+ public function __construct(#[\SensitiveParameter] \PDO\|string $connOrDsn, string $namespace = '', int $defaultLifetime = 0, array $options = [], MarshallerInterface $marshaller = null)`
`59`	`59`	`{`
`60`	`60`	`if (\is_string($connOrDsn) && str_contains($connOrDsn, '://')) {`
`61`	`61`	`throw new InvalidArgumentException(sprintf('Usage of Doctrine DBAL URL with "%s" is not supported. Use a PDO DSN or "%s" instead. Got "%s".', __CLASS__, DoctrineDbalAdapter::class, $connOrDsn));`
Original file line number	Diff line number	Diff line change
`@@ -80,7 +80,7 @@ private function init(\Redis\|\RedisArray\|\RedisCluster\|\Predis\ClientInterface $`
`80`	`80`	`*`
`81`	`81`	`* @throws InvalidArgumentException when the DSN is invalid`
`82`	`82`	`*/`
`83`		`- public static function createConnection(string $dsn, array $options = []): \Redis\|\RedisArray\|\RedisCluster\|\Predis\ClientInterface`
	`83`	`+ public static function createConnection(#[\SensitiveParameter] string $dsn, array $options = []): \Redis\|\RedisArray\|\RedisCluster\|\Predis\ClientInterface`
`84`	`84`	`{`
`85`	`85`	`if (str_starts_with($dsn, 'redis:')) {`
`86`	`86`	`$scheme = 'redis';`
Original file line number	Diff line number	Diff line change
`@@ -151,7 +151,7 @@ class PdoSessionHandler extends AbstractSessionHandler`
`151`	`151`	`*`
`152`	`152`	`* @throws \InvalidArgumentException When PDO error mode is not PDO::ERRMODE_EXCEPTION`
`153`	`153`	`*/`
`154`		`- public function __construct(\PDO\|string $pdoOrDsn = null, array $options = [])`
	`154`	`+ public function __construct(#[\SensitiveParameter] \PDO\|string $pdoOrDsn = null, array $options = [])`
`155`	`155`	`{`
`156`	`156`	`if ($pdoOrDsn instanceof \PDO) {`
`157`	`157`	`if (\PDO::ERRMODE_EXCEPTION !== $pdoOrDsn->getAttribute(\PDO::ATTR_ERRMODE)) {`
`@@ -415,7 +415,7 @@ public function close(): bool`
`415`	`415`	`/**`
`416`	`416`	`* Lazy-connects to the database.`
`417`	`417`	`*/`
`418`		`- private function connect(string $dsn): void`
	`418`	`+ private function connect(#[\SensitiveParameter] string $dsn): void`
`419`	`419`	`{`
`420`	`420`	`$this->pdo = new \PDO($dsn, $this->username, $this->password, $this->connectionOptions);`
`421`	`421`	`$this->pdo->setAttribute(\PDO::ATTR_ERRMODE, \PDO::ERRMODE_EXCEPTION);`
`@@ -427,7 +427,7 @@ private function connect(string $dsn): void`
`427`	`427`	`*`
`428`	`428`	`* @todo implement missing support for oci DSN (which look totally different from other PDO ones)`
`429`	`429`	`*/`
`430`		`- private function buildDsnFromUrl(string $dsnOrUrl): string`
	`430`	`+ private function buildDsnFromUrl(#[\SensitiveParameter] string $dsnOrUrl): string`
`431`	`431`	`{`
`432`	`432`	`// (pdo_)?sqlite3?:///... => (pdo_)?sqlite3?://localhost/... or else the URL will be invalid`
`433`	`433`	`$url = preg_replace('#^((?:pdo_)?sqlite3?):///#', '$1://localhost/', $dsnOrUrl);`
Original file line number	Diff line number	Diff line change
`@@ -38,7 +38,7 @@ class DoctrineDbalPostgreSqlStore implements BlockingSharedLockStoreInterface, B`
`38`	`38`	`*`
`39`	`39`	`* @throws InvalidArgumentException When first argument is not Connection nor string`
`40`	`40`	`*/`
`41`		`- public function __construct(Connection\|string $connOrUrl)`
	`41`	`+ public function __construct(#[\SensitiveParameter] Connection\|string $connOrUrl)`
`42`	`42`	`{`
`43`	`43`	`if ($connOrUrl instanceof Connection) {`
`44`	`44`	`if (!$connOrUrl->getDatabasePlatform() instanceof PostgreSQLPlatform) {`
`@@ -243,7 +243,7 @@ private function unlockShared(Key $key): void`
`243`	`243`	`*`
`244`	`244`	`* @throws InvalidArgumentException when driver is not supported`
`245`	`245`	`*/`
`246`		`- private function filterDsn(string $dsn): string`
	`246`	`+ private function filterDsn(#[\SensitiveParameter] string $dsn): string`
`247`	`247`	`{`
`248`	`248`	`if (!str_contains($dsn, '://')) {`
`249`	`249`	`throw new InvalidArgumentException(sprintf('String "%" is not a valid DSN for Doctrine DBAL.', $dsn));`
Original file line number	Diff line number	Diff line change
`@@ -64,7 +64,7 @@ class PdoStore implements PersistingStoreInterface`
`64`	`64`	`* @throws InvalidArgumentException When PDO error mode is not PDO::ERRMODE_EXCEPTION`
`65`	`65`	`* @throws InvalidArgumentException When the initial ttl is not valid`
`66`	`66`	`*/`
`67`		`- public function __construct(\PDO\|string $connOrDsn, array $options = [], float $gcProbability = 0.01, int $initialTtl = 300)`
	`67`	`+ public function __construct(#[\SensitiveParameter] \PDO\|string $connOrDsn, #[\SensitiveParameter] array $options = [], float $gcProbability = 0.01, int $initialTtl = 300)`
`68`	`68`	`{`
`69`	`69`	`$this->init($options, $gcProbability, $initialTtl);`
`70`	`70`
Original file line number	Diff line number	Diff line change
`@@ -49,7 +49,7 @@ class PostgreSqlStore implements BlockingSharedLockStoreInterface, BlockingStore`
`49`	`49`	`* @throws InvalidArgumentException When PDO error mode is not PDO::ERRMODE_EXCEPTION`
`50`	`50`	`* @throws InvalidArgumentException When namespace contains invalid characters`
`51`	`51`	`*/`
`52`		`- public function __construct(\PDO\|string $connOrDsn, array $options = [])`
	`52`	`+ public function __construct(#[\SensitiveParameter] \PDO\|string $connOrDsn, #[\SensitiveParameter] array $options = [])`
`53`	`53`	`{`
`54`	`54`	`if ($connOrDsn instanceof \PDO) {`
`55`	`55`	`if (\PDO::ERRMODE_EXCEPTION !== $connOrDsn->getAttribute(\PDO::ATTR_ERRMODE)) {`