Not sure if this is the right place to submit a "bug report" but here it goes:
If you print a DAL object (using a MySQL adapter, at least) the username is
hidden but the password is still visible. To me it looks like the regexp is
at fault (gluon/dal.py):
REGEX_PASSWORD = re.compile('\://([^:@]*)\:')
--
