Merge branch 'support-forum_816' into 'master'

Don't expose repository credentials when raising error on mirror update.

REF: https://gitlab.com/gitlab-com/support-forum/issues/816

See merge request !527

app/workers/repository_update_mirror_worker.rb

@@ -27,7 +27,7 @@ class RepositoryUpdateMirrorWorker
     rescue => ex
       project.mark_import_as_failed("We're sorry, a temporary error occurred, please try again.")
 
-      raise UpdateMirrorError, "#{ex.class}: #{ex.message}"
+      raise UpdateMirrorError, "#{ex.class}: #{Gitlab::UrlSanitizer.sanitize(ex.message)}"
     end
   end
 

app/workers/repository_update_remote_mirror_worker.rb

@@ -21,7 +21,7 @@ class RepositoryUpdateRemoteMirrorWorker
     rescue => ex
       remote_mirror.mark_as_failed("We're sorry, a temporary error occurred, please try again.")
 
-      raise UpdateRemoteMirrorError, "#{ex.class}: #{ex.message}"
+      raise UpdateRemoteMirrorError, "#{ex.class}: #{Gitlab::UrlSanitizer.sanitize(ex.message)}"
     end
   end
 end