feat: adding support for data uri sanitisation

lib/logger/utils.spec.ts

@@ -48,6 +48,7 @@ describe('logger/utils', () => {
     ${'redis://:somepw@172.32.11.71:6379/0'}                              | ${'redis://**redacted**@172.32.11.71:6379/0'}
     ${'some text with\r\n url: https://somepw@domain.com\nand some more'} | ${'some text with\r\n url: https://**redacted**@domain.com\nand some more'}
     ${'[git://domain.com](git://pw@domain.com)'}                          | ${'[git://domain.com](git://**redacted**@domain.com)'}
+    ${'data:text/vnd-example;foo=bar;base64,R0lGODdh'}                    | ${'data:**redacted**'}
     ${'user@domain.com'}                                                  | ${'user@domain.com'}
   `('sanitizeValue("$input") == "$output"', ({ input, output }) => {
     expect(sanitizeValue(input)).toBe(output);

lib/logger/utils.ts

@@ -324,9 +324,18 @@ export function validateLogLevel(
 // Can't use `util/regex` because of circular reference to logger
 const urlRe = /[a-z]{3,9}:\/\/[^@/]+@[a-z0-9.-]+/gi;
 const urlCredRe = /\/\/[^@]+@/g;
+const dataUriCredRe = /^data:[0-9a-z-]+\/[0-9a-z-]+;.+/i;
 
 export function sanitizeUrls(text: string): string {
-  return text.replace(urlRe, (url) => {
+  let sanitizedText = text.replace(urlRe, (url) => {
     return url.replace(urlCredRe, '//**redacted**@');
   });
+
+  // Check for data URIs
+  if (sanitizedText.startsWith('data:')) {
+    sanitizedText = sanitizedText.replace(dataUriCredRe, (dataUri) => {
+      return 'data:**redacted**';
+    });
+  }
+  return sanitizedText;
 }