[HttpKernel] Mask '_password' request in profiler

Author: goabonga

DataCollector/RequestDataCollector.php

@@ -117,6 +117,10 @@ public function collect(Request $request, Response $response, \Exception $except
             $this->data['request_server']['PHP_AUTH_PW'] = '******';
         }
 
+        if (isset($this->data['request_request']['_password'])) {
+            $this->data['request_request']['_password'] = '******';
+        }
+
         if (isset($this->controllers[$request])) {
             $controller = $this->controllers[$request];
             if (is_array($controller)) {