Java/Spring Boot code
Java Code Masking Tool replaces packages, classes, methods, fields, variables, strings, comments, etc. You can also check the SQL fragments contained within the Java source.
SQL
SQL Masking Tool selects Oracle, PostgreSQL, MySQL, SQL Server, and SQLite dialects and replaces table names, column names, strings, numbers, and comments. Suitable for sharing standalone SQL rather than SQL embedded as a Java string.
JSON
JSON Masking Tool replaces keys, strings, and numbers while preserving object and array hierarchy. Suitable for checking API requests/responses and configuration files.
Logs
Log Masking Tool discovers IP addresses, URLs, email addresses, paths, and identifiers from Log4j, Syslog, JSON Lines, access logs, and more. Be sure to visually check the results of free-form text and stack traces.
Vue, React, and jQuery
For front-end code, choose the tool that matches your syntax: Vue, React, jQuery. Each tool accounts for differences in components, JSX/TSX, templates, and selectors.
Python, C#, PHP, VB.NET, VBA, Rust
For back-end, desktop, macro, and systems code, choose from Python, C#, PHP, VB.NET, VBA, Rust. Each tool accounts for the language's reserved words, comments, strings, and type and function declarations.
COBOL and Bash
Use the COBOL Code Masking Tool for COBOL code and the Bash Script Masking Tool. The tools account for COBOL fixed-format code and PIC clauses, and for Bash shebangs, variable expansion, and heredocs.
Ruby, Swift, and Objective-C
For web and business applications, use Ruby. For Apple-platform code, use Swift or Objective-C as appropriate. Each tool accounts for the language's strings, comments, and type and method declarations.
Decision making when in doubt
- When working with whole files, choose a tool that matches the extension and main syntax.
- If multiple formats such as JSON are mixed in the log, check the inner format after masking the outer format.
- Delete credentials before entering them in any tool and don't rely solely on replacement.
- After processing, use the masking checklist to review the output before sharing.