text.mask

pub fn mask(value: &str, visible: i64, mask_char: &str, keep_separators: bool) -> String

fune!(text.mask@^1);  // then call mask(…)

use super::funejson::Value;  ← the fune runtime: the JSON value the test vectors use; fune build keeps it only where a signature takes one

/// Only these two are separators: they are how card and sort-code numbers are
/// printed.
fn is_separator(ch: char) -> bool {
    ch == ' ' || ch == '-'
}

/// Mask all but the last `visible` characters of `value` with `mask_char`.
///
/// Characters are Unicode code points (`char`), so an emoji counts once and
/// the result has as many code points as the input.
///
/// # Panics
/// Panics if `visible` is negative or `mask_char` is not exactly one character.
pub fn mask(value: &str, visible: i64, mask_char: &str, keep_separators: bool) -> String {
    if visible < 0 {
        panic!("visible must be 0 or greater, received {}", visible);
    }
    let mut mask_chars = mask_char.chars();
    let replacement = match (mask_chars.next(), mask_chars.next()) {
        (Some(c), None) => c,
        _ => panic!("maskChar must be exactly one character, received \"{}\"", mask_char),
    };

    let chars: Vec<char> = value.chars().collect();
    let mut out: Vec<char> = vec![replacement; chars.len()];
    let mut shown: i64 = 0;
    // Walk from the end so "the last n" is counted without a second pass.
    for i in (0..chars.len()).rev() {
        let ch = chars[i];
        if keep_separators && is_separator(ch) {
            out[i] = ch;
        } else if shown < visible {
            out[i] = ch;
            shown += 1;
        }
    }
    out.into_iter().collect()
}

pub fn fune_vector(args: &[Value]) -> Value {
    Value::Str(mask(
        args[0].as_str(),
        args[1].as_i64(),
        args[2].as_str(),
        args[3].as_bool(),
    ))
}

Install

fune build

With that line in your source, in a Rust project (language rust in fune.project), fune build resolves it and nothing else, pins them in fune.lock, downloads only the Rust package of each, and builds the code above into your project’s .fune/build, one readable file per capability with a header linking back here. A crate’s build.rs runs it before every compile. Or pin a range in fune.project and build in one step:

fune add text.mask

The manifest, vectors and README with only the Rust implementation. Install it without the registry with fune add ./text.mask-1.0.0-rust.fune, or fetch it from a terminal with fune pull text.mask@1.0.0:rust.

The whole function, every language, is one file too: text.mask-1.0.0.fune, 10,511 bytes, sha256 e1bbb7d0741d771c6ccf2ae30859e642453a9ee706208c1183714ba54a1668fa. It installs into a project of any language.

// fune: before text.mask

// fune: after text.mask

// fune: step text.mask after <n|label>

More from the author

With `keepSeparators` on, ASCII spaces and hyphens stay where they are and are not counted, so a card printed in groups keeps its shape and still shows its last four digits: "4242 4242 4242 4242" becomes "**** **** **** 4242", and the sort code "12-34-56" with 2 visible becomes "**-**-56". Only those two characters are separators; dots, slashes and brackets are masked like anything else, because they are just as often part of the secret.

With it off, separators are ordinary characters: they are masked and they count towards `visible`, so the output never reveals how a value was grouped.

## Counting

Characters are Unicode code points in all three languages, so an accented letter or an emoji counts once, and the result always has the same number of code points as the input. A letter written as a base letter plus a combining accent is two code points and is masked as two.

## Edge cases

- `visible` of 0 masks everything; `visible` at or above the length returns the value unchanged. Nothing is padded: a short value stays short. - A negative `visible`, or a `maskChar` that is not exactly one code point, is an error.

## What masking is not

Masking is for display. The digits you show must be ones you are allowed to show - PCI DSS permits at most the first six and last four of a card number - and the full value must not be sent to the page at all if it is not needed there. This function does not know what the value is.

Files