Escape secrets before you mask them in logs

const escape = (s: string) => s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
function maskingLog(next: Handler, secrets: string[]): Handler {
  const vals = secrets.filter(Boolean).map(escape);
  if (!vals.length) return next;
  const re = new RegExp(vals.join('|'), 'g');           // built once
  return { event: e => next.event({ ...e,
    text: e.text?.replace(re, '********'), detail: e.detail?.replace(re, '********') }) };
}