Move masking flag to src/base

Author: yadij

src/HttpHeader.cc

@@ -669,15 +669,15 @@ HttpHeader::parse(const char *header_start, size_t hdrLen, Http::ContentLengthIn
 
 /* packs all the entries using supplied packer */
 void
-HttpHeader::packInto(Packable * p, Security::MaskSensitiveInfo masking) const
+HttpHeader::packInto(Packable * p, MaskSensitiveInfo masking) const
 {
     HttpHeaderPos pos = HttpHeaderInitPos;
     const HttpHeaderEntry *e;
     assert(p);
-    debugs(55, 7, this << " into " << p << (masking == Security::MaskSensitiveInfo::on ? " while masking" : ""));
+    debugs(55, 7, this << " into " << p << (masking == MaskSensitiveInfo::on ? " while masking" : ""));
     /* pack all entries one by one */
     while ((e = getEntry(&pos))) {
-        if (masking == Security::MaskSensitiveInfo::off) {
+        if (masking == MaskSensitiveInfo::off) {
             e->packInto(p);
             continue;
         }

src/HttpHeader.h

@@ -11,6 +11,7 @@
 
 #include "anyp/ProtocolVersion.h"
 #include "base/LookupTable.h"
+#include "base/MaskSensitiveInfo.h"
 #include "http/RegisteredHeaders.h"
 /* because we pass a spec by value */
 #include "HttpHeaderMask.h"
@@ -99,7 +100,7 @@ class HttpHeader
     int parse(const char *buf, size_t buf_len, bool atEnd, size_t &hdr_sz, Http::ContentLengthInterpreter &interpreter);
     /// Serialize HTTP Fields using HTTP/1.1 syntax in RFC 9112 section 5.
     /// Optionally redact credentials in HTTP Authentication headers.
-    void packInto(Packable *, Security::MaskSensitiveInfo) const;
+    void packInto(Packable *, MaskSensitiveInfo) const;
     HttpHeaderEntry *getEntry(HttpHeaderPos * pos) const;
     HttpHeaderEntry *findEntry(Http::HdrType id) const;
     /// deletes all fields with a given name, if any.

src/HttpReply.cc

@@ -87,7 +87,7 @@ void
 HttpReply::packHeadersUsingFastPacker(Packable &p) const
 {
     sline.packInto(&p);
-    header.packInto(&p, Security::MaskSensitiveInfo::off);
+    header.packInto(&p, MaskSensitiveInfo::off);
     p.append("\r\n", 2);
 }
 

src/HttpRequest.cc

@@ -334,13 +334,13 @@ HttpRequest::swapOut(StoreEntry * e)
 {
     assert(e);
     e->buffer();
-    pack(e, Security::MaskSensitiveInfo::off);
+    pack(e, MaskSensitiveInfo::off);
     e->flush();
 }
 
 /* packs request-line and headers, appends <crlf> terminator */
 void
-HttpRequest::pack(Packable * p, Security::MaskSensitiveInfo mask) const
+HttpRequest::pack(Packable * p, MaskSensitiveInfo mask) const
 {
     assert(p);
     /* pack request-line */
@@ -358,7 +358,7 @@ void
 httpRequestPack(void *obj, Packable *p)
 {
     HttpRequest *request = static_cast<HttpRequest*>(obj);
-    request->pack(p, Security::MaskSensitiveInfo::off);
+    request->pack(p, MaskSensitiveInfo::off);
 }
 
 /* returns the length of request line + headers + crlf */

src/HttpRequest.h

@@ -206,7 +206,7 @@ class HttpRequest: public Http::Message
 
     /// Serialize HTTP Request using HTTP/1.1 origin-form syntax in RFC 9112 section 3.
     /// \copydoc HttpHeader::packInto()
-    void pack(Packable *, Security::MaskSensitiveInfo) const;
+    void pack(Packable *, MaskSensitiveInfo) const;
 
     static void httpRequestPack(void *obj, Packable *p);
 

src/base/Makefile.am

@@ -48,6 +48,7 @@ libbase_la_SOURCES = \
 	JobWait.h \
 	Lock.h \
 	LookupTable.h \
+	MaskSensitiveInfo.h \
 	OnOff.h \
 	Packable.h \
 	PackableStream.h \

src/base/MaskSensitiveInfo.h

@@ -0,0 +1,17 @@
+/*
+ * Copyright (C) 1996-2025 The Squid Software Foundation and contributors
+ *
+ * Squid software is distributed under GPLv2+ license and includes
+ * contributions from numerous individuals and organizations.
+ * Please see the COPYING and CONTRIBUTORS files for details.
+ */
+
+#ifndef SQUID_SRC_BASE_MASKSENSITIVEINFO_H
+#define SQUID_SRC_BASE_MASKSENSITIVEINFO_H
+
+#include "base/OnOff.h"
+
+/// Flags for explicit decisions on handling of sensitive information.
+using MaskSensitiveInfo = OnOff;
+
+#endif /* SQUID_SRC_BASE_MASKSENSITIVEINFO_H */

src/client_side.cc

@@ -327,22 +327,22 @@ prepareLogWithRequestDetails(HttpRequest *request, const AccessLogEntryPointer &
     if (Config.onoff.log_mime_hdrs) {
         MemBuf mb;
         mb.init();
-        request->header.packInto(&mb, Security::MaskSensitiveInfo::off);
+        request->header.packInto(&mb, MaskSensitiveInfo::off);
         //This is the request after adaptation or redirection
         aLogEntry->headers.adapted_request = xstrdup(mb.buf);
 
         // the virgin request is saved to aLogEntry->request
         if (aLogEntry->request) {
             mb.reset();
-            aLogEntry->request->header.packInto(&mb, Security::MaskSensitiveInfo::off);
+            aLogEntry->request->header.packInto(&mb, MaskSensitiveInfo::off);
             aLogEntry->headers.request = xstrdup(mb.buf);
         }
 
 #if USE_ADAPTATION
         const Adaptation::History::Pointer ah = request->adaptLogHistory();
         if (ah != nullptr) {
             mb.reset();
-            ah->lastMeta.packInto(&mb, Security::MaskSensitiveInfo::off);
+            ah->lastMeta.packInto(&mb, MaskSensitiveInfo::off);
             aLogEntry->adapt.last_meta = xstrdup(mb.buf);
         }
 #endif
@@ -724,7 +724,7 @@ clientPackRangeHdr(const HttpReplyPointer &rep, const HttpHdrRangeSpec * spec, S
 
     httpHeaderAddContRange(&hdr, *spec, rep->content_length);
 
-    hdr.packInto(mb, Security::MaskSensitiveInfo::off);
+    hdr.packInto(mb, MaskSensitiveInfo::off);
     hdr.clean();
 
     /* append <crlf> (we packed a header, not a reply) */

src/clients/HttpTunneler.cc

@@ -152,7 +152,7 @@ Http::Tunneler::writeRequest()
                                               &hdr_out,
                                               connection->getPeer(),
                                               flags);
-        hdr_out.packInto(&mb, Security::MaskSensitiveInfo::off);
+        hdr_out.packInto(&mb, MaskSensitiveInfo::off);
         hdr_out.clean();
         mb.append("\r\n", 2);
 

src/errorpage.cc

@@ -886,7 +886,7 @@ ErrorState::Dump(MemBuf * mb)
         body << "HTTP Request:\r\n";
         MemBuf r;
         r.init();
-        request->pack(&r, Security::MaskSensitiveInfo::on);
+        request->pack(&r, MaskSensitiveInfo::on);
         body << r.content();
     }
 
@@ -1149,7 +1149,7 @@ ErrorState::compileLegacyCode(Build &build)
             break;
         }
         else if (request)
-            request->pack(&mb, Security::MaskSensitiveInfo::on);
+            request->pack(&mb, MaskSensitiveInfo::on);
         else
             p = "[no request]";
         break;