I have environment variables defined as 'Global passwords' in matrix job configuration visible with upgrade to envinject 1.73.
Previously there were links to 'Injected Environment Variables' only for the configurations of matrix project, e.g.:
$JENKINS_URL/job/$JOBNAME/$BUILD_NUMBER/arch=arch1/injectedEnvVars/?
With 1.73 update the 'Injected Environment Variables' link appeared for the parent builds, e.g.:
$JENKINS_URL/job/$JOBNAME/$BUILD_NUMBER/injectedEnvVars/?
And the environment variables defined as 'Global Passwords' are visible in plain text here.