Introduce a security func to scrub error messages

This helper was around already, so this is a duplication but now its
tested. Later we could move all other occurances to leverage this
helper.

1 files changed, 11 insertions, 0 deletions

diff --git a/internal/helper/security.go b/internal/helper/security.go
index 8dae4f9c5..afbcced9d 100644
--- a/internal/helper/security.go
+++ b/internal/helper/security.go
@@ -2,6 +2,7 @@ package helper
 
 import (
 	"os"
+	"regexp"
 	"strings"
 )
 
@@ -13,3 +14,13 @@ func ContainsPathTraversal(path string) bool {
 		strings.Contains(path, separator+".."+separator) ||
 		strings.HasSuffix(path, separator+"..")
 }
+
+// Pattern taken from Regular Expressions Cookbook, slightly modified though
+//                                        |Scheme                |User                         |Named/IPv4 host|IPv6+ host
+var hostPattern = regexp.MustCompile(`(?i)([a-z][a-z0-9+\-.]*://)([a-z0-9\-._~%!$&'()*+,;=:]+@)([a-z0-9\-._~%]+|\[[a-z0-9\-._~%!$&'()*+,;=:]+\])`)
+
+// SanitizeString will clean password and tokens from URLs, and replace them
+// with [FILTERED].
+func SanitizeString(str string) string {
+	return hostPattern.ReplaceAllString(str, "$1[FILTERED]@$3$4")
+}