feat(analye-wasm, redact-wasm): ignore dashes in card numbers (#5210)

This generates new WebAssembly into `@arcjet/analyze-wasm` and `@arcjet/redact-wasm` which supports this feature.
This also adds tests for card numbers to make it visible and trackable what is and is supported in `@arcjet/analyze-wasm` and `@arcjet/redact-wasm`.

Closes GH-5209.

Author: wooorm-arcjet

analyze-wasm/test/index.test.ts

@@ -1,5 +1,44 @@
 import assert from "node:assert/strict";
 import test from "node:test";
+import { initializeWasm } from "../index.js";
+
+const wasm = await initializeWasm({
+  "arcjet:js-req/bot-identifier": {
+    detect() {
+      return [];
+    },
+  },
+  "arcjet:js-req/email-validator-overrides": {
+    hasGravatar() {
+      return "unknown";
+    },
+    hasMxRecords() {
+      return "unknown";
+    },
+    isDisposableEmail() {
+      return "unknown";
+    },
+    isFreeEmail() {
+      return "unknown";
+    },
+  },
+  "arcjet:js-req/filter-overrides": {
+    ipLookup() {
+      return undefined;
+    },
+  },
+  "arcjet:js-req/sensitive-information-identifier": {
+    detect() {
+      return [];
+    },
+  },
+  "arcjet:js-req/verify-bot": {
+    verify() {
+      return "unverifiable";
+    },
+  },
+});
+assert.ok(wasm);
 
 test("@arcjet/analyze-wasm", async function (t) {
   await t.test("should expose the public api", async function () {
@@ -8,3 +47,77 @@ test("@arcjet/analyze-wasm", async function (t) {
     ]);
   });
 });
+
+test("`detectSensitiveInfo`", async function (t) {
+  await t.test("should detect a card number", async function () {
+    assert.deepEqual(
+      wasm.detectSensitiveInfo("a 4242424242424242 b", {
+        entities: { tag: "allow", val: [] },
+        skipCustomDetect: false,
+      }),
+      {
+        allowed: [],
+        denied: [
+          { end: 18, identifiedType: { tag: "credit-card-number" }, start: 2 },
+        ],
+      },
+    );
+  });
+
+  await t.test("should detect a card number if in `allow`", async function () {
+    assert.deepEqual(
+      wasm.detectSensitiveInfo("a 4242424242424242 b", {
+        entities: { tag: "allow", val: [{ tag: "credit-card-number" }] },
+        skipCustomDetect: false,
+      }),
+      {
+        allowed: [
+          {
+            end: 18,
+            identifiedType: { tag: "credit-card-number" },
+            start: 2,
+          },
+        ],
+        denied: [],
+      },
+    );
+  });
+
+  await t.test("should detect a card number w/ dashes", async function () {
+    assert.deepEqual(
+      wasm.detectSensitiveInfo("a 4242-4242-4242-4242 b", {
+        entities: { tag: "allow", val: [{ tag: "credit-card-number" }] },
+        skipCustomDetect: false,
+      }),
+      {
+        allowed: [
+          {
+            end: 21,
+            identifiedType: { tag: "credit-card-number" },
+            start: 2,
+          },
+        ],
+        denied: [],
+      },
+    );
+  });
+
+  await t.test("should detect a card number w/ spaces", async function () {
+    assert.deepEqual(
+      wasm.detectSensitiveInfo("a 4242 4242 4242 4242 b", {
+        entities: { tag: "allow", val: [{ tag: "credit-card-number" }] },
+        skipCustomDetect: false,
+      }),
+      {
+        allowed: [
+          {
+            end: 21,
+            identifiedType: { tag: "credit-card-number" },
+            start: 2,
+          },
+        ],
+        denied: [],
+      },
+    );
+  });
+});