simon/semantic-release
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: hide sensitive info for Buffer and undefined

Browse Source
This commit is contained in:
Pierre Vanduynslager 2018-01-27 18:05:16 -05:00
parent cb36dd4890
commit 8b3605dd04
2 changed files with 13 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
lib/hide-sensitive.js
View File

@ -1,11 +1,8 @@
const {escapeRegExp} = require('lodash'); const {escapeRegExp} = require('lodash');
const regexp = new RegExp( const toReplace = Object.keys(process.env).filter(envVar => /token|password|credential|secret|private/i.test(envVar));
Object.keys(process.env) const regexp = new RegExp(toReplace.map(envVar => escapeRegExp(process.env[envVar])).join('|'), 'g');
.filter(envVar => /token|password|credential|secret|private/i.test(envVar))
.map(envVar => escapeRegExp(process.env[envVar]))
.join('|'),
'g'
);
module.exports = output => output.replace(regexp, '[secure]'); module.exports = output => {
return output && toReplace.length > 0 ? output.toString().replace(regexp, '[secure]') : output;
};

8
test/hide-sensitive.test.js
View File

@ -32,3 +32,11 @@ test.serial('Escape regexp special characters', t => {
'https://user:[secure]@host.com' 'https://user:[secure]@host.com'
); );
}); });
test.serial('Accept "undefined" input', t => {
t.is(require('../lib/hide-sensitive')(), undefined);
});
test.serial('Return same string if no environment variable has to be replaced', t => {
t.is(require('../lib/hide-sensitive')('test'), 'test');
});