c:\@Work\Perl\monks>perl
use 5.014;  # needed for s///ubstitution /r modifier

use warnings;
use strict;

use Test::More 'no_plan';
use Test::NoWarnings;

# use Data::Dump qw(dd pp);  # for debug

my $rx_semi_strict_ssn = qr{
  (?> (?<! \d) \d{3} (\D?) \d{2} \g-1 \d{4} (?! \d))
  }xms;

my @TESTS = (
  'masking valid ssns',
  [ '# SSN=123-12-1234 987.65.4321'
    =>
    '# SSN=XXX-XX-1234 XXX.XX.4321'
    ],
  [ '123456789 123 45 6789'
    =>
    'XXXXX6789 XXX XX 6789'
    ],
  'no masking (no valid ssns)',
  [ '12345678 12345123451 123-456789'
    =>
    '12345678 12345123451 123-456789'
    ],
  [ '12-3-45-6789 12345 6789 123-45.6789'
    =>
    '12-3-45-6789 12345 6789 123-45.6789'
    ],
  );

VECTOR:
for my $ar_vector (@TESTS) {

  if (not ref $ar_vector) {
    note $ar_vector;
    next VECTOR;
    }

  my ($str, $expected) = @$ar_vector;

  my $got = $str;

  $got =~ s{ ($rx_semi_strict_ssn) }
           { $^N =~ s{ (?! \d{1,4} \z) \d }{X}xmsgr }xmsge;
  ok $got eq $expected, qq{'$str' -> '$expected'};

  }  # end for VECTOR

done_testing;

exit;

__END__
# masking valid ssns
ok 1 - '\# SSN=123-12-1234 987.65.4321' -> '\# SSN=XXX-XX-1234 XXX.XX.4321'
ok 2 - '123456789 123 45 6789' -> 'XXXXX6789 XXX XX 6789'
# no masking (no valid ssns)
ok 3 - '12345678 12345123451 123-456789' -> '12345678 12345123451 123-456789'
ok 4 - '12-3-45-6789 12345 6789 123-45.6789' -> '12-3-45-6789 12345 6789 123-45.6789'
1..4
ok 5 - no warnings
1..5