mask
Masks a UAN for PII-safe display.
UAN is employment PII — always mask before displaying in UI or logging.
Masking operates on the raw input string (not normalised). This is intentional — the masker is a display utility that works character-by-character on whatever string it receives. Callers who want to mask a normalised UAN should call format first: UAN.mask(UAN.format(value)).
Default (visibleStart=0, visibleEnd=4, maskChar='X'): Shows last 4 characters, masks the rest. "101234567890" → "XXXXXXXX7890" (last 4: "7890")
Edge cases (all safe — never throws):
Empty input → returns
"".visibleStart + visibleEnd >= value.length→ entire string returned unmasked (overlap rule).Non-normalised input (spaces, hyphens) → masking applied character-by-character on the raw string. No normalisation is performed.
Return
Masked string. Never throws — display-safe by contract.
Parameters
Raw UAN string to mask. No normalisation is applied.
Number of leading characters to show unmasked. Default: 0.
Number of trailing characters to show unmasked. Default: 4.
Character to replace masked positions. Default: 'X'.
Samples
check(UAN.mask("100123456789") == "XXXXXXXX6789")