url: always show password for URL instances

This matches browser behavior.

PR-URL: https://github.com/nodejs/node/pull/12420
Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
Reviewed-By: Timothy Gu <timothygu99@gmail.com>
Reviewed-By: Daijiro Wachi <daijiro.wachi@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com>

lib/internal/url.js

@@ -206,8 +206,6 @@ class URL {
       throw new errors.TypeError('ERR_INVALID_THIS', 'URL');
     }
 
-    const ctx = this[context];
-
     if (typeof depth === 'number' && depth < 0)
       return opts.stylize('[Object]', 'special');
 
@@ -221,8 +219,7 @@ class URL {
     obj.origin = this.origin;
     obj.protocol = this.protocol;
     obj.username = this.username;
-    obj.password = (opts.showHidden || ctx.password === '') ?
-                     this.password : '--------';
+    obj.password = this.password;
     obj.host = this.host;
     obj.hostname = this.hostname;
     obj.port = this.port;

test/parallel/test-whatwg-url-inspect.js

@@ -21,7 +21,7 @@ assert.strictEqual(
   origin: 'https://host.name:8080',
   protocol: 'https:',
   username: 'username',
-  password: '--------',
+  password: 'password',
   host: 'host.name:8080',
   hostname: 'host.name',
   port: '8080',