@active-reach/web-sdk 1.38.0 → 1.39.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1111,7 +1111,18 @@ class Storage {
1111
1111
  }
1112
1112
  }
1113
1113
  }
1114
- const CREDENTIAL_URL_PARAMS = ["t", "k", "code", "session_code", "aegis_pair", "u"];
1114
+ const CREDENTIAL_URL_PARAMS = [
1115
+ "t",
1116
+ "k",
1117
+ "code",
1118
+ "session_code",
1119
+ "aegis_pair",
1120
+ "u",
1121
+ // The Shopify CarrierService callback token (2026-09-18). Server-to-server
1122
+ // today, so the SDK never sees one — it is here because the two lists are
1123
+ // ONE rule, and a list that is only correct for today's callers is not.
1124
+ "carrier_token"
1125
+ ];
1115
1126
  const REDACTED = "REDACTED";
1116
1127
  const CREDENTIAL_PARAM_PATTERN = new RegExp(
1117
1128
  `([?&])(${CREDENTIAL_URL_PARAMS.join("|")})=([^&#\\s"'<>]+)`,
@@ -3481,4 +3492,4 @@ export {
3481
3492
  murmurhash3_x86_32 as m,
3482
3493
  redactUrl as r
3483
3494
  };
3484
- //# sourceMappingURL=analytics-Cz1ZBOxH.mjs.map
3495
+ //# sourceMappingURL=analytics-DoHdxjjh.mjs.map