Add option to redact (mask) sensitive URL parameters like ?password=... or ?token=...

[Mazgis47]

Problem Statement

Some of the external APIs use authentication via URL parameters e.g.:
https://myapi.com/query?token=abcd
When using otelhttp Transport, transaction contains sensitive information in the attributes like http.url.

	otelHttpClient := http.Client{
		Transport: otelhttp.NewTransport(http.DefaultTransport),
	}

Proposed Solution

Have an Option to pass, something like WithParameterRedact(keysToSanitize []string), to the function:
func NewTransport(base http.RoundTripper, opts ...Option) *Transport
Which would replace actual token with the masked string like ?token=xxxxx

Alternatives

• Create own implementation (code duplication, additional code lines)
• https://betterstack.com/community/guides/observability/redacting-sensitive-data-opentelemetry/ (not always possible/flexible)

Prior Art

See alternatives

Additional Context

I just need this option to protect sensitive data leakage.

[dmathieu]

There is a plugin that allows doing that more broadly than just within otelhttp.
https://github.com/MrAlias/redact