rust-sanitize 0.11.0

Deterministic one-way data sanitization engine
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65

# Insomnia — token patterns in request headers, parameters, and body text

# Bearer token in raw header/param values
- kind: regex
  pattern: '(?i)\bBearer\s+([A-Za-z0-9\-._~+/]{16,})\b'
  category: auth_token
  label: insomnia_bearer_token

# JWT (service account tokens in bodies or environment values)
- kind: regex
  pattern: '\b(eyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,})\b'
  category: jwt
  label: insomnia_jwt

# AWS access key ID
- kind: regex
  pattern: '\b((?:AKIA|ASIA|AROA)[A-Z0-9]{16})\b'
  category: auth_token
  label: insomnia_aws_access_key

# OAuth2 tokens in response body text (often pasted into env data)
- kind: regex
  pattern: '"(?:access_token|refresh_token|id_token)"\s*:\s*"([A-Za-z0-9\-._~+/]{16,})"'
  category: auth_token
  label: insomnia_oauth_token

# field-name signal: high-entropy `value` fields in header and parameter arrays
- kind: field-name
  pattern: "^value$"
  category: auth_token
  label: insomnia_value_signal
  threshold: 4.0

- kind: allow
  values:
    - "Bearer"
    - "Basic"
    - "application/json"
    - "application/x-www-form-urlencoded"
    - "multipart/form-data"
    - "text/plain"
    - "text/html"
    - "header"
    - "query"
    - "true"
    - "false"
    - "null"
    - "none"
    - "0"
    - "1"
    - "localhost"
    - "127.0.0.1"
    - "0.0.0.0"
    - "::1"
    - "YOUR_*"
    - "REPLACE_*"
    - "<*>"
    - "changeme"
    - "example"
    - "sample"
    - "placeholder"
    - "${*}"
    - "{{*}}"
    - "example.com"
    - "example.org"