Skip to content

Commit 6120a8e

Browse files
committed
masking fix for sensitive info incase of white spacing
1 parent 832ef43 commit 6120a8e

File tree

2 files changed

+5
-7
lines changed

2 files changed

+5
-7
lines changed

cybersource-rest-auth-netstandard/AuthenticationSdk/AuthenticationSdk/util/LogUtility.cs

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -45,8 +45,6 @@ private void LoadSensitiveDataConfiguration()
4545

4646
public string MaskSensitiveData(string str)
4747
{
48-
string v = str.Replace(" ", "");
49-
str = v;
5048
try
5149
{
5250
foreach (KeyValuePair<string, string> tag in sensitiveTags)

cybersource-rest-auth-netstandard/AuthenticationSdk/AuthenticationSdk/util/SensitiveDataConfigurationType.cs

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -6,11 +6,11 @@ public class SensitiveDataConfigurationType
66
public static SensitiveTag[] sensitiveTags = new SensitiveTag[]
77
{
88
new SensitiveTag("securityCode", "[0-9]{3,4}", "xxxxx", false),
9-
new SensitiveTag("number", "(\\p{N}+)(\\p{N}{4})", "xxxxx$2", false),
10-
new SensitiveTag("cardNumber", "(\\p{N}+)(\\p{N}{4})", "xxxxx$2", false),
9+
new SensitiveTag("number", "(\\s*\\p{N}\\s*)+(\\p{N}{4})(\\s*)", "xxxxx$2", false),
10+
new SensitiveTag("cardNumber", "(\\s*\\p{N}\\s*)+(\\p{N}{4})(\\s*)", "xxxxx$2", false),
1111
new SensitiveTag("expirationMonth", "[0-1][0-9]", "xxxx", false),
1212
new SensitiveTag("expirationYear", "2[0-9][0-9][0-9]", "xxxx", false),
13-
new SensitiveTag("account", "(\\p{N}+)(\\p{N}{4})", "xxxxx$2", false),
13+
new SensitiveTag("account", "(\\s*\\p{N}\\s*)+(\\p{N}{4})(\\s*)", "xxxxx$2", false),
1414
new SensitiveTag("routingNumber", "[0-9]+", "xxxxx", false),
1515
new SensitiveTag("email", "[a-z0-9!#$%&'*+\\/=?^_`{|}~-]+(?:.[a-z0-9!#$%&'*+\\/=?^_`{|}~-]+)*@(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?.)+[a-z0-9](?:[a-z0-9-]*[a-z0-9])?", "xxxxx", false),
1616
new SensitiveTag("firstName", "([a-zA-Z]+( )?[a-zA-Z]*'?-?[a-zA-Z]*( )?([a-zA-Z]*)?)", "xxxxx", false),
@@ -19,8 +19,8 @@ public class SensitiveDataConfigurationType
1919
new SensitiveTag("type", "[-A-Za-z0-9 ]+", "xxxxx", false),
2020
new SensitiveTag("token", "[-.A-Za-z0-9 ]+", "xxxxx", false),
2121
new SensitiveTag("signature", "[-.A-Za-z0-9 ]+", "xxxxx", false),
22-
new SensitiveTag("prefix", "(\\p{N}{6})(\\p{N}*)", "$1xxxxx", false),
23-
new SensitiveTag("bin", "(\\p{N}{6})(\\p{N}*)", "$1xxxxx", false)
22+
new SensitiveTag("prefix", "(\\s*)(\\p{N}{4})(\\s*)(\\p{N}{2})(\\s*\\p{N}*\\s*)", "$2$4xxxxx", false),
23+
new SensitiveTag("bin", "(\\s*)(\\p{N}{4})(\\s*)(\\p{N}{2})(\\s*\\p{N}*\\s*)", "$2$4xxxxx", false)
2424
};
2525

2626
public static AuthenticationSchemeTag[] authenticationTags = new AuthenticationSchemeTag[]

0 commit comments

Comments
 (0)