org.jenkinsci.plugins.credentialsbinding.masking

Class SecretPatterns

java.lang.Object

org.jenkinsci.plugins.credentialsbinding.masking.SecretPatterns

@Restricted(value=org.kohsuke.accmod.restrictions.NoExternalUse.class)
public class SecretPatterns
extends Object

Constructor Summary

Constructors

Constructor and Description
SecretPatterns()

Method Summary

Modifier and Type	Method and Description
static Pattern	getAggregateSecretPattern(Collection<String> inputs) Constructs a regular expression to match against all known forms that the given collection of input strings may appear.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecretPatterns

public SecretPatterns()

Method Detail

getAggregateSecretPattern

@Nonnull
public static Pattern getAggregateSecretPattern(@Nonnull
                                                         Collection<String> inputs)

Constructs a regular expression to match against all known forms that the given collection of input strings may appear. This pattern is optimized such that longer masks are checked before shorter masks. By doing so, this makes inputs that are substrings of other inputs be masked as the longer input, though there is no guarantee this will work in every possible situation. Another consequence of this ordering is that inputs that require quoting will be masked before a substring of the input was matched, thus avoiding leakage of information. For example, bash -x will only quote arguments echoed when necessary. To avoid leaking the presence or absence of quoting, the longer form is masked.