Add a string based URL parameter shuffling function

[terrorbyte]

Adds a transform.ShuffleURLParameters function that takes a string value and converts it to a URL and takes the query parameters and changes their order. This is me shaking my fist angrily at terrible network signatures that care about parameter order.

As usual, oddly complex to deal with using crypto/rand as shuffle and some net/url.Values being a map[string][]string

[Copilot]

Pull request overview

This PR introduces a new function ShuffleURLParameters that randomizes the order of query parameters in URL strings to work around network signatures that are sensitive to parameter ordering.

• Implements cryptographically secure shuffling using crypto/rand for seed generation
• Handles URLs with or without schemes and multiple values for the same parameter key
• Includes comprehensive test coverage for various URL formats and edge cases

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
transform/transform.go	Implements the ShuffleURLParameters function with URL parsing, parameter extraction, and cryptographically seeded shuffling
transform/transform_test.go	Adds test cases covering relative URLs, full URLs with schemes, and invalid URL handling

Comments suppressed due to low confidence (1)

transform/transform.go:1

• The testing package should not be imported in production code. Consider removing the testing.Testing() check and using a different approach for conditional logging, such as passing a logger interface or using build tags to separate test and production behavior.

package transform

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.