@accelerated-agency/visual-editor 0.4.8 → 0.5.0

package/dist/vite.cjs

@@ -3235,11 +3235,36 @@ function isIframeDomReady(iframe, doc) {
 
 function parseEditorUrlPayload(rawUrl) {
   if (!rawUrl) return null;
+  function stripVolatileQueryParams(urlObj) {
+    if (!urlObj || !urlObj.searchParams) return urlObj;
+    var keys = [];
+    urlObj.searchParams.forEach(function(_v, k) { keys.push(k); });
+    for (var i = 0; i < keys.length; i++) {
+      var key = String(keys[i] || '');
+      var low = key.toLowerCase();
+      var isVolatile =
+        low.indexOf('__cf') === 0 ||
+        low.indexOf('cf_chl') === 0 ||
+        low.indexOf('_cf') === 0 ||
+        low === 'bm_sv' ||
+        low === '_abck' ||
+        low === 'ak_bmsc' ||
+        low === 'visid_incap' ||
+        low.indexOf('incap_ses') === 0;
+      if (isVolatile) urlObj.searchParams.delete(key);
+    }
+    return urlObj;
+  }
   try {
     var parsed = new URL(String(rawUrl), window.location.href);
     var nestedUrl = parsed.searchParams.get('url');
     var nestedPassword = parsed.searchParams.get('password');
     if (nestedUrl || nestedPassword) {
+      if (nestedUrl) {
+        try {
+          nestedUrl = stripVolatileQueryParams(new URL(String(nestedUrl), window.location.href)).toString();
+        } catch(_) {}
+      }
       return {
         url: nestedUrl || undefined,
         password: nestedPassword || undefined,
@@ -3265,6 +3290,7 @@ function parseEditorUrlPayload(rawUrl) {
         recovered.search = '';
         qp.forEach(function(v, k) { recovered.searchParams.set(k, v); });
         recovered.hash = parsed.hash || '';
+        stripVolatileQueryParams(recovered);
         return {
           url: recovered.toString(),
           password:
@@ -3282,6 +3308,7 @@ function parseEditorUrlPayload(rawUrl) {
           var normalized = new URL(parsed.pathname || '/', targetBase.origin);
           normalized.search = parsed.search || '';
           normalized.hash = parsed.hash || '';
+          stripVolatileQueryParams(normalized);
           return {
             url: normalized.toString(),
             password:
@@ -3293,7 +3320,7 @@ function parseEditorUrlPayload(rawUrl) {
       } catch(_) {}
     }
     return {
-      url: parsed.toString(),
+      url: stripVolatileQueryParams(parsed).toString(),
       password:
         (experimentData && experimentData.editorPassword)
           ? String(experimentData.editorPassword)
@@ -6407,6 +6434,7 @@ var TARGET_PAGE_URL=${JSON.stringify(targetUrl)};
 var PROXY_PASSWORD=${JSON.stringify(password)};
 var PROXY_BASE_URL="";
 var STRICT_OBSERVER_FREEZE=${JSON.stringify(strictObserverFreezeForRequest)};
+var EXTRA_TRACKING_MARKERS=${JSON.stringify(trackingMarkersForRequest)};
 var PARENT_URL_CHANNEL="vvveb-proxy-url";
 window.__CONVERSION_EDITOR_ACTIVE__=true;
 window.__EDITOR_MODE__=true;
@@ -6447,9 +6475,11 @@ function isPeriodicCollectPayload(data){
 }
 function shouldBlockEditorTracking(rawUrl){
   try{
+    var rawString=String(rawUrl||"");
     var u=new URL(String(rawUrl||""),window.location.href);
     var host=(u.hostname||"").toLowerCase();
     var path=(u.pathname||"").toLowerCase();
+    var full=(u.toString()||"").toLowerCase();
     var q=u.searchParams;
     var hasViewportPing=q.has("vp")&&(q.has("pp_miy")||q.has("pp_may"));
     var hasSessionIds=q.has("sid")||q.has("duid");
@@ -6459,11 +6489,12 @@ function shouldBlockEditorTracking(rawUrl){
     var isTaboolaUnip=host==="trc-events.taboola.com"&&/\\/log\\/\\d+\\/unip(?:\\/|$)/.test(path);
     var isCollectApiPath=path==="/api/collect"||path.indexOf("/api/collect/")===0;
     var isNbCollectorPath=path==="/nb-collector"||path.indexOf("/nb-collector/")===0;
-    return isCrossOriginCollector||(looksLikeHeartbeatPayload&&isSnowplowStylePath)||isCollectApiPath||isTaboolaUnip||isNbCollectorPath;
+    var hasExtraMarker=hasMarker(host,EXTRA_TRACKING_MARKERS)||hasMarker(path,EXTRA_TRACKING_MARKERS)||hasMarker(full,EXTRA_TRACKING_MARKERS)||hasMarker(rawString,EXTRA_TRACKING_MARKERS);
+    return isCrossOriginCollector||(looksLikeHeartbeatPayload&&isSnowplowStylePath)||isCollectApiPath||isTaboolaUnip||isNbCollectorPath||hasExtraMarker;
   }catch(_){
     try{
       var s=String(rawUrl||"").toLowerCase();
-      return s.indexOf("snowplow")!==-1||s.indexOf("com.snowplowanalytics")!==-1||s.indexOf("collector")!==-1||s.indexOf("/api/collect")!==-1||s.indexOf("trc-events.taboola.com")!==-1||s.indexOf("/nb-collector")!==-1||s.indexOf("northbeam")!==-1;
+      return s.indexOf("snowplow")!==-1||s.indexOf("com.snowplowanalytics")!==-1||s.indexOf("collector")!==-1||s.indexOf("/api/collect")!==-1||s.indexOf("trc-events.taboola.com")!==-1||s.indexOf("/nb-collector")!==-1||s.indexOf("northbeam")!==-1||hasMarker(s,EXTRA_TRACKING_MARKERS);
     }catch(__){
       return false;
     }
@@ -6519,9 +6550,34 @@ try{
 }catch(_){}
 function getEditorUrlPayload(){
   try{
+    function stripVolatileQueryParams(urlObj){
+      try{
+        if(!urlObj||!urlObj.searchParams) return urlObj;
+        var keys=[];
+        urlObj.searchParams.forEach(function(_v,k){keys.push(k);});
+        for(var i=0;i<keys.length;i++){
+          var key=String(keys[i]||"");
+          var low=key.toLowerCase();
+          var isVolatile=
+            low.indexOf("__cf")===0||
+            low.indexOf("cf_chl")===0||
+            low.indexOf("_cf")===0||
+            low==="bm_sv"||
+            low==="_abck"||
+            low==="ak_bmsc"||
+            low==="visid_incap"||
+            low.indexOf("incap_ses")===0;
+          if(isVolatile) urlObj.searchParams.delete(key);
+        }
+      }catch(_){}
+      return urlObj;
+    }
     var u=new URL(window.location.href);
     var nested=u.searchParams.get("url");
     if(nested){
+      try{
+        nested=stripVolatileQueryParams(new URL(String(nested),window.location.href)).toString();
+      }catch(_){}
       return {url:nested,password:u.searchParams.get("password")||undefined};
     }
     var p=u.pathname||"";
@@ -6539,6 +6595,7 @@ function getEditorUrlPayload(){
       recoveredBase.search="";
       qp.forEach(function(v,k){recoveredBase.searchParams.set(k,v);});
       recoveredBase.hash=u.hash||"";
+      stripVolatileQueryParams(recoveredBase);
       return {url:recoveredBase.toString(),password:u.searchParams.get("password")||undefined};
     }
     try{
@@ -6547,10 +6604,11 @@ function getEditorUrlPayload(){
         var normalized2=new URL((u.pathname||"/"),targetBase2.origin);
         normalized2.search=u.search||"";
         normalized2.hash=u.hash||"";
+        stripVolatileQueryParams(normalized2);
         return {url:normalized2.toString(),password:u.searchParams.get("password")||undefined};
       }
     }catch(_){}
-    return {url:u.toString(),password:u.searchParams.get("password")||undefined};
+    return {url:stripVolatileQueryParams(u).toString(),password:u.searchParams.get("password")||undefined};
   }catch(_){
     return null;
   }

package/dist/vite.js

@@ -3227,11 +3227,36 @@ function isIframeDomReady(iframe, doc) {
 
 function parseEditorUrlPayload(rawUrl) {
   if (!rawUrl) return null;
+  function stripVolatileQueryParams(urlObj) {
+    if (!urlObj || !urlObj.searchParams) return urlObj;
+    var keys = [];
+    urlObj.searchParams.forEach(function(_v, k) { keys.push(k); });
+    for (var i = 0; i < keys.length; i++) {
+      var key = String(keys[i] || '');
+      var low = key.toLowerCase();
+      var isVolatile =
+        low.indexOf('__cf') === 0 ||
+        low.indexOf('cf_chl') === 0 ||
+        low.indexOf('_cf') === 0 ||
+        low === 'bm_sv' ||
+        low === '_abck' ||
+        low === 'ak_bmsc' ||
+        low === 'visid_incap' ||
+        low.indexOf('incap_ses') === 0;
+      if (isVolatile) urlObj.searchParams.delete(key);
+    }
+    return urlObj;
+  }
   try {
     var parsed = new URL(String(rawUrl), window.location.href);
     var nestedUrl = parsed.searchParams.get('url');
     var nestedPassword = parsed.searchParams.get('password');
     if (nestedUrl || nestedPassword) {
+      if (nestedUrl) {
+        try {
+          nestedUrl = stripVolatileQueryParams(new URL(String(nestedUrl), window.location.href)).toString();
+        } catch(_) {}
+      }
       return {
         url: nestedUrl || undefined,
         password: nestedPassword || undefined,
@@ -3257,6 +3282,7 @@ function parseEditorUrlPayload(rawUrl) {
         recovered.search = '';
         qp.forEach(function(v, k) { recovered.searchParams.set(k, v); });
         recovered.hash = parsed.hash || '';
+        stripVolatileQueryParams(recovered);
         return {
           url: recovered.toString(),
           password:
@@ -3274,6 +3300,7 @@ function parseEditorUrlPayload(rawUrl) {
           var normalized = new URL(parsed.pathname || '/', targetBase.origin);
           normalized.search = parsed.search || '';
           normalized.hash = parsed.hash || '';
+          stripVolatileQueryParams(normalized);
           return {
             url: normalized.toString(),
             password:
@@ -3285,7 +3312,7 @@ function parseEditorUrlPayload(rawUrl) {
       } catch(_) {}
     }
     return {
-      url: parsed.toString(),
+      url: stripVolatileQueryParams(parsed).toString(),
       password:
         (experimentData && experimentData.editorPassword)
           ? String(experimentData.editorPassword)
@@ -6399,6 +6426,7 @@ var TARGET_PAGE_URL=${JSON.stringify(targetUrl)};
 var PROXY_PASSWORD=${JSON.stringify(password)};
 var PROXY_BASE_URL="";
 var STRICT_OBSERVER_FREEZE=${JSON.stringify(strictObserverFreezeForRequest)};
+var EXTRA_TRACKING_MARKERS=${JSON.stringify(trackingMarkersForRequest)};
 var PARENT_URL_CHANNEL="vvveb-proxy-url";
 window.__CONVERSION_EDITOR_ACTIVE__=true;
 window.__EDITOR_MODE__=true;
@@ -6439,9 +6467,11 @@ function isPeriodicCollectPayload(data){
 }
 function shouldBlockEditorTracking(rawUrl){
   try{
+    var rawString=String(rawUrl||"");
     var u=new URL(String(rawUrl||""),window.location.href);
     var host=(u.hostname||"").toLowerCase();
     var path=(u.pathname||"").toLowerCase();
+    var full=(u.toString()||"").toLowerCase();
     var q=u.searchParams;
     var hasViewportPing=q.has("vp")&&(q.has("pp_miy")||q.has("pp_may"));
     var hasSessionIds=q.has("sid")||q.has("duid");
@@ -6451,11 +6481,12 @@ function shouldBlockEditorTracking(rawUrl){
     var isTaboolaUnip=host==="trc-events.taboola.com"&&/\\/log\\/\\d+\\/unip(?:\\/|$)/.test(path);
     var isCollectApiPath=path==="/api/collect"||path.indexOf("/api/collect/")===0;
     var isNbCollectorPath=path==="/nb-collector"||path.indexOf("/nb-collector/")===0;
-    return isCrossOriginCollector||(looksLikeHeartbeatPayload&&isSnowplowStylePath)||isCollectApiPath||isTaboolaUnip||isNbCollectorPath;
+    var hasExtraMarker=hasMarker(host,EXTRA_TRACKING_MARKERS)||hasMarker(path,EXTRA_TRACKING_MARKERS)||hasMarker(full,EXTRA_TRACKING_MARKERS)||hasMarker(rawString,EXTRA_TRACKING_MARKERS);
+    return isCrossOriginCollector||(looksLikeHeartbeatPayload&&isSnowplowStylePath)||isCollectApiPath||isTaboolaUnip||isNbCollectorPath||hasExtraMarker;
   }catch(_){
     try{
       var s=String(rawUrl||"").toLowerCase();
-      return s.indexOf("snowplow")!==-1||s.indexOf("com.snowplowanalytics")!==-1||s.indexOf("collector")!==-1||s.indexOf("/api/collect")!==-1||s.indexOf("trc-events.taboola.com")!==-1||s.indexOf("/nb-collector")!==-1||s.indexOf("northbeam")!==-1;
+      return s.indexOf("snowplow")!==-1||s.indexOf("com.snowplowanalytics")!==-1||s.indexOf("collector")!==-1||s.indexOf("/api/collect")!==-1||s.indexOf("trc-events.taboola.com")!==-1||s.indexOf("/nb-collector")!==-1||s.indexOf("northbeam")!==-1||hasMarker(s,EXTRA_TRACKING_MARKERS);
     }catch(__){
       return false;
     }
@@ -6511,9 +6542,34 @@ try{
 }catch(_){}
 function getEditorUrlPayload(){
   try{
+    function stripVolatileQueryParams(urlObj){
+      try{
+        if(!urlObj||!urlObj.searchParams) return urlObj;
+        var keys=[];
+        urlObj.searchParams.forEach(function(_v,k){keys.push(k);});
+        for(var i=0;i<keys.length;i++){
+          var key=String(keys[i]||"");
+          var low=key.toLowerCase();
+          var isVolatile=
+            low.indexOf("__cf")===0||
+            low.indexOf("cf_chl")===0||
+            low.indexOf("_cf")===0||
+            low==="bm_sv"||
+            low==="_abck"||
+            low==="ak_bmsc"||
+            low==="visid_incap"||
+            low.indexOf("incap_ses")===0;
+          if(isVolatile) urlObj.searchParams.delete(key);
+        }
+      }catch(_){}
+      return urlObj;
+    }
     var u=new URL(window.location.href);
     var nested=u.searchParams.get("url");
     if(nested){
+      try{
+        nested=stripVolatileQueryParams(new URL(String(nested),window.location.href)).toString();
+      }catch(_){}
       return {url:nested,password:u.searchParams.get("password")||undefined};
     }
     var p=u.pathname||"";
@@ -6531,6 +6587,7 @@ function getEditorUrlPayload(){
       recoveredBase.search="";
       qp.forEach(function(v,k){recoveredBase.searchParams.set(k,v);});
       recoveredBase.hash=u.hash||"";
+      stripVolatileQueryParams(recoveredBase);
       return {url:recoveredBase.toString(),password:u.searchParams.get("password")||undefined};
     }
     try{
@@ -6539,10 +6596,11 @@ function getEditorUrlPayload(){
         var normalized2=new URL((u.pathname||"/"),targetBase2.origin);
         normalized2.search=u.search||"";
         normalized2.hash=u.hash||"";
+        stripVolatileQueryParams(normalized2);
         return {url:normalized2.toString(),password:u.searchParams.get("password")||undefined};
       }
     }catch(_){}
-    return {url:u.toString(),password:u.searchParams.get("password")||undefined};
+    return {url:stripVolatileQueryParams(u).toString(),password:u.searchParams.get("password")||undefined};
   }catch(_){
     return null;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@accelerated-agency/visual-editor",
-  "version": "0.4.8",
+  "version": "0.5.0",
   "private": false,
   "description": "Conversion visual editor as a reusable React package",
   "type": "module",