Struct DlpScanner 

pub struct DlpScanner { /* private fields */ }

Thread-safe DLP scanner

Implementations

impl DlpScanner

pub fn new(config: DlpConfig) -> Self

Create a new DLP scanner with the given configuration.

Panics

Panics if configuration validation fails (e.g., Hash mode without salt). Use try_new for fallible construction.

pub fn try_new(config: DlpConfig) -> Result<Self, DlpConfigError>

Create a new DLP scanner with validation. Returns error if configuration is invalid.

pub fn is_enabled(&self) -> bool

Check if scanner is enabled

pub fn record_violations( &self, result: &ScanResult, client_ip: Option<&str>, path: &str, )

Record violations from a scan result

pub async fn get_recent_violations(&self) -> Vec<DlpViolation>

Get recent violations

pub fn scan(&self, content: &str) -> ScanResult

Scan content for sensitive data with optimizations:

• Inspection depth cap (truncation for large payloads)
• Aho-Corasick prefiltering for patterns with literal prefixes

pub fn scan_bytes(&self, data: &[u8]) -> ScanResult

Scan bytes as UTF-8 text

pub fn is_scannable_content_type(&self, content_type: &str) -> bool

Check if content type should be scanned. Returns false for binary types (images, audio, video, archives, etc.) Returns true for text-based types that may contain sensitive data.

pub fn should_skip_content_type(&self, content_type: &str) -> bool

Quick check if content type should skip DLP entirely (binary content)

pub fn stats(&self) -> DlpStats

Get scanner statistics

pub fn pattern_count(&self) -> usize

Get pattern count

Trait Implementations

impl Default for DlpScanner

fn default() -> Self

Returns the “default value” for a type.