qubit-redact 0.9.0

Rule-driven redaction for fields, diagnostics, HTTP data, and Rust domain objects
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77

// =============================================================================
//    Copyright (c) 2026 Haixing Hu.
//
//    SPDX-License-Identifier: Apache-2.0
//
//    Licensed under the Apache License, Version 2.0.
// =============================================================================
//! Internal bounded masking and formatter error propagation.

use std::fmt;

use crate::MaskPolicy;

struct FailingWriter;

impl fmt::Write for FailingWriter {
    fn write_str(&mut self, _value: &str) -> fmt::Result {
        Err(fmt::Error)
    }
}

#[test]
fn test_mask_bounded_with_truncation_respects_unicode_boundary() {
    let (masked, truncated) = MaskPolicy::fixed("甲乙丙").mask_bounded_with_truncation("secret", 4);

    assert_eq!(masked, "甲");
    assert!(truncated);
}

#[test]
fn test_mask_bounded_with_truncation_preserves_empty_borrow_without_truncation() {
    let (masked, truncated) = MaskPolicy::fixed("mask").mask_bounded_with_truncation("", 0);

    assert_eq!(masked, "");
    assert!(matches!(masked, std::borrow::Cow::Borrowed("")));
    assert!(!truncated);
}

#[test]
fn test_mask_bounded_with_truncation_covers_edge_and_suffix_outputs() {
    let (edges, edges_truncated) = MaskPolicy::preserve_edges(1, 1, "***", 0).mask_bounded_with_truncation("甲乙丙", 7);
    let (suffix, suffix_truncated) = MaskPolicy::preserve_suffix(1, "***", 0).mask_bounded_with_truncation("甲乙丙", 6);

    assert_eq!(edges, "甲***");
    assert!(edges_truncated);
    assert_eq!(suffix, "***丙");
    assert!(!suffix_truncated);
}

#[test]
fn test_opaque_mask_bounded_uses_complete_utf8_prefix() {
    assert_eq!(MaskPolicy::fixed("甲乙").opaque_mask_bounded(4), "甲");
    assert_eq!(MaskPolicy::empty().opaque_mask_bounded(0), "");
}

#[test]
fn test_write_masked_writes_each_policy_and_propagates_errors() {
    let mut output = String::new();
    MaskPolicy::preserve_edges(1, 1, "*", 0)
        .write_masked("abcd", &mut output)
        .expect("the string writer should accept the mask");
    assert_eq!(output, "a*d");

    output.clear();
    MaskPolicy::preserve_suffix(2, "*", 0)
        .write_masked("abcd", &mut output)
        .expect("the string writer should accept the mask");
    assert_eq!(output, "*cd");

    MaskPolicy::empty()
        .write_masked("secret", &mut output)
        .expect("the empty policy should not write");
    assert_eq!(
        MaskPolicy::fixed("*").write_masked("secret", &mut FailingWriter),
        Err(fmt::Error),
    );
}