--- a/mercurial/localrepo.py	Sun Apr 11 20:59:55 2010 -0700
+++ b/mercurial/localrepo.py	Mon Apr 12 21:37:21 2010 +0200
@@ -14,6 +14,7 @@
 import match as matchmod
 import merge as mergemod
 import tags as tagsmod
+import url as urlmod
 from lock import release
 import weakref, stat, errno, os, time, inspect
 propertycache = util.propertycache
@@ -2017,7 +2018,7 @@
         cl.delayupdate()
         oldheads = len(cl.heads())
 
-        tr = self.transaction(",".join([srctype, url]))
+        tr = self.transaction(",".join([srctype, urlmod.hidepassword(url)]))
         try:
             trp = weakref.proxy(tr)
             # pull off the changeset group