fix is_sensitive_key

This commit is contained in:
Ishaan Jaffer 2025-09-30 17:05:57 -07:00
parent 68189d1c04
commit aac1129761

View file

@ -44,7 +44,14 @@ class SensitiveDataMasker:
def is_sensitive_key(self, key: str) -> bool:
key_lower = str(key).lower()
result = any(pattern in key_lower for pattern in self.sensitive_patterns)
# Split on underscores and check if any segment matches the pattern
# This avoids false positives like "max_tokens" matching "token"
# but still catches "api_key", "access_token", etc.
key_segments = key_lower.replace('-', '_').split('_')
result = any(
pattern in key_segments
for pattern in self.sensitive_patterns
)
return result
def mask_dict(