Open
Description
If credentials are passed in the URI, e.g. https://user:pass@foo.com/bar.git then the credential is properly removed from the cmdline in the exception, but if an authorization header is set via http.extraHeader then the credential is not stripped from the exception.