apihunter 0.1.2

Async API security scanner with passive and active checks for CORS, CSP, GraphQL, JWT, OpenAPI, and API posture.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

pub fn redact_secret(s: &str, keep_chars: usize) -> String {
    let chars: Vec<char> = s.chars().collect();
    if chars.len() <= keep_chars * 2 {
        return "*".repeat(chars.len());
    }

    let head: String = chars[..keep_chars].iter().collect();
    let tail: String = chars[chars.len() - keep_chars..].iter().collect();
    let stars = "*".repeat(chars.len().saturating_sub(keep_chars * 2).min(12));
    format!("{head}{stars}{tail}")
}

pub fn snippet(s: &str, max_len: usize) -> String {
    if s.len() <= max_len {
        s.to_string()
    } else {
        let boundary = s
            .char_indices()
            .take_while(|&(i, _)| i < max_len)
            .last()
            .map(|(i, c)| i + c.len_utf8())
            .unwrap_or(0);
        format!("{}... ({} bytes total)", &s[..boundary], s.len())
    }
}

pub fn slugify(s: &str) -> String {
    let mut result = String::with_capacity(s.len());
    let mut prev_dash = false;

    for c in s.chars() {
        if c.is_ascii_alphanumeric() {
            result.push(c.to_ascii_lowercase());
            prev_dash = false;
        } else if !prev_dash {
            result.push('-');
            prev_dash = true;
        }
    }

    // Trim leading/trailing dashes
    result.trim_matches('-').to_string()
}