Composer leaks contents of tokens configured as GitHub OAuth tokens

A Hacker News discussion highlights a Symfony error-display issue that can expose GitHub OAuth tokens in styled error output.

Newlines or interleaved HTML-like tags can split a secret, preventing GitHub’s masking from recognizing and redacting the full token.

The result is accidental credential leakage in logs, CI output, or error pages.

The case shows how formatting alone can defeat secret-redaction systems.