fix(log): add brackets to secret mask (#333)

Co-authored-by: dave vader <[email protected]>

library/log.go

@@ -54,7 +54,7 @@ func (l *Log) MaskData(secrets []string) {
 		// create regexp to match secrets in the log data surrounded by regexp metacharacters
 		//
 		// https://pkg.go.dev/regexp#MustCompile
-		buffer := `(\s|^|=|"|\?|:|'|\.|,|&|$|;)`
+		buffer := `(\s|^|=|"|\?|:|'|\.|,|&|$|;|\[|\])`
 		re := regexp.MustCompile((buffer + escaped + buffer))
 
 		// create a mask for the secret

library/log_test.go

@@ -54,6 +54,8 @@ func TestLibrary_Log_MaskData(t *testing.T) {
 	s4Masked := "SOME_SECRET=***"
 	s5 := "www.example.com?username=secret&password=extrasecret"
 	s5Masked := "www.example.com?username=***&password=***"
+	s6 := "[token: extrasecret]"
+	s6Masked := "[token: ***]"
 
 	tests := []struct {
 		want    []byte
@@ -85,6 +87,11 @@ func TestLibrary_Log_MaskData(t *testing.T) {
 			log:     []byte(s5),
 			secrets: sVals,
 		},
+		{ // secret in verbose brackets
+			want:    []byte(s6Masked),
+			log:     []byte(s6),
+			secrets: sVals,
+		},
 		{ // empty secrets slice
 			want:    []byte(s3),
 			log:     []byte(s3),