enhance(log): improve secret mask buffer

go-vela · Aug 16, 2023 · 975d21a · 975d21a
1 parent 1e3aae6
commit 975d21a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/library/log.go b/library/log.go
@@ -56,7 +56,8 @@ func (l *Log) MaskData(secrets []string) {
 		// create regexp to match secrets in the log data surrounded by regexp metacharacters
 		//
 		// https://pkg.go.dev/regexp#MustCompile
-		re := regexp.MustCompile((`(\s|^|=|"|:|'|\.|,)` + escaped + `(\s|$|"|:|'|\.|,)`))
+		buffer := `(\s|^|=|"|?|:|'|\.|,|&|$|;)`
+		re := regexp.MustCompile((buffer + escaped + buffer))
 
 		// create a mask for the secret
 		mask := fmt.Sprintf("$1%s$2", constants.SecretLogMask)