sanitize

func SanitizeString ¶

func SanitizeString(key string, visiblePrefixLength, visibleSuffixLength int) string

SanitizeString masks the interior of key, preserving the first visiblePrefixLength characters and the last visibleSuffixLength characters and replacing the hidden portion with asterisks. The number of asterisks is capped at 4 regardless of the actual hidden length, so the output does not leak information about the key's size.

Special cases:

• If either length parameter is negative, an empty string is returned as a safety measure (invalid input → no output).
• If key matches the [safeVocabulary] (empty string, "undefined", "None", "null"), it is returned unmodified.
• If key is shorter than visiblePrefixLength + visibleSuffixLength, it is returned unmodified because there is nothing to mask.

Examples:

SanitizeString("sk_live_abc123xyz", 7, 3) → "sk_live****xyz"
SanitizeString("short", 3, 3)             → "short"       (too short to mask)
SanitizeString("null", 3, 2)              → "null"        (safe vocabulary)
SanitizeString("abcdef", 0, 0)            → "****"        (fully masked)