dd-sensitive-data-scanner 0.0.0

Core Sensitive Data Scanner library for detecting and redacting sensitive information.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

use crate::secondary_validation::Validator;

/// Accepts matches that contain at least one character outside `[0-9a-fA-F]`.
///
/// Useful to drop pure hexadecimal substrings (for example hashes or UUIDs without separators)
/// while keeping tokens that use a wider alphabet (base64, prefixes, punctuation, etc.).
pub struct NonHexChecker;

impl Validator for NonHexChecker {
    fn is_valid_match(&self, regex_match: &str) -> bool {
        regex_match.chars().any(|c| !c.is_ascii_hexdigit())
    }
}

#[cfg(test)]
mod tests {
    use crate::secondary_validation::Validator;
    use crate::secondary_validation::non_hex_checker::NonHexChecker;

    #[test]
    fn rejects_pure_hex() {
        for input in [
            "",
            "a",
            "deadbeef",
            "DEADBEEF0123456789",
            "0123456789abcdef",
            "AbCdEf0123456789",
        ] {
            assert!(
                !NonHexChecker.is_valid_match(input),
                "expected pure hex or empty to be rejected: {input:?}"
            );
        }
    }

    #[test]
    fn accepts_when_any_non_hex_present() {
        for input in [
            "g",
            "0g",
            "sk_live_abc",
            "abc-def",
            "ff_FF", // underscore is not hex
            "日本",
        ] {
            assert!(
                NonHexChecker.is_valid_match(input),
                "expected non-hex character to accept: {input:?}"
            );
        }
    }
}