@ada-support/web-storage 1.0.0 → 1.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,11 +1,19 @@
1
1
  name: "Notify people"
2
2
 
3
- on:
3
+ on:
4
4
  pull_request:
5
5
  types: [opened, reopened, ready_for_review]
6
- paths:
7
- - "src/storage-keys.ts"
8
- - "src/third-party-items.ts"
6
+ paths:
7
+ - "src/storage-keys.ts"
8
+ - "src/third-party-items.ts"
9
+
10
+ push:
11
+ branches-ignore:
12
+ - "main"
13
+ paths:
14
+ - "src/storage-keys.ts"
15
+ - "src/third-party-items.ts"
16
+
9
17
  jobs:
10
18
  notify:
11
19
  runs-on: ubuntu-latest
@@ -34,3 +42,8 @@ jobs:
34
42
  uses: rtCamp/action-slack-notify@v2
35
43
  env:
36
44
  SLACK_CHANNEL: "#t-security"
45
+
46
+ - name: "Notify Canva CSM"
47
+ uses: rtCamp/action-slack-notify@v2
48
+ env:
49
+ SLACK_CHANNEL: "#canva-internal"
@@ -29,12 +29,60 @@ border: 1px solid;
29
29
  </thead>
30
30
  <tbody>
31
31
  <tr>
32
+ <td>__cf_bm</td>
33
+ <td>Used by Vimeo to filter bots</td>
34
+ <td>Cookie (analytics)</td>
35
+ <td>1 Year</td>
36
+ </tr>
37
+ <tr>
38
+ <td>__cfruid</td>
39
+ <td>Used by Zendesk Messaging to filter malicious web traffic through Cloudflare</td>
40
+ <td>Cookie (essential)</td>
41
+ <td>Session (as long as the browser application is open)</td>
42
+ </tr>
43
+ <tr>
44
+ <td>__Secure-[alphanumeric ID]</td>
45
+ <td>Used by Youtube to deliver relevant advertisements</td>
46
+ <td>Cookie (marketing)</td>
47
+ <td>1 Year</td>
48
+ </tr>
49
+ <tr>
50
+ <td>__stripe_mid</td>
51
+ <td>Used by Calendly to prevent fraudulent transactions</td>
52
+ <td>Cookie (functional)</td>
53
+ <td>1 Year</td>
54
+ </tr>
55
+ <tr>
56
+ <td>_calendly_session</td>
57
+ <td>Used by Calendly to store user's preferences</td>
58
+ <td>Cookie (functional)</td>
59
+ <td>15 days</td>
60
+ </tr>
61
+ <tr>
32
62
  <td>_dd_s</td>
33
63
  <td>Used to monitor user sessions for DataDog RUM Tracking.</td>
34
64
  <td>Cookie (functional, security)</td>
35
65
  <td>10-15 Minutes</td>
36
66
  </tr>
37
67
  <tr>
68
+ <td>_ga</td>
69
+ <td>Used by Calendly to track page views</td>
70
+ <td>Cookie (analytics)</td>
71
+ <td>1 Year</td>
72
+ </tr>
73
+ <tr>
74
+ <td>_GRECAPTCHA</td>
75
+ <td>Used by Calendly to prevent spamming</td>
76
+ <td>Cookie (functional)</td>
77
+ <td>6 months</td>
78
+ </tr>
79
+ <tr>
80
+ <td>_hp2_id.[user_id]</td>
81
+ <td>Used by Calendly to gather page interactions of users</td>
82
+ <td>Cookie (analytics)</td>
83
+ <td>1 Year</td>
84
+ </tr>
85
+ <tr>
38
86
  <td>_MUTEX_LOCK_X_zendeskSessionLock</td>
39
87
  <td>Used by FastMutex for Zendesk Chat sessions.</td>
40
88
  <td>Web Storage (essential)</td>
@@ -113,6 +161,12 @@ border: 1px solid;
113
161
  <td>Persistent</td>
114
162
  </tr>
115
163
  <tr>
164
+ <td>APISID</td>
165
+ <td>Used by Youtube to gather information on played videos</td>
166
+ <td>Cookie (analytics)</td>
167
+ <td>1 Year</td>
168
+ </tr>
169
+ <tr>
116
170
  <td>backoffTimeout</td>
117
171
  <td>Used to implement Chat reconnection after an interruption.</td>
118
172
  <td>Web Storage (functional)</td>
@@ -143,6 +197,12 @@ border: 1px solid;
143
197
  <td>3 Months</td>
144
198
  </tr>
145
199
  <tr>
200
+ <td>HSID</td>
201
+ <td>Youtube uses this cookie for security purposes in order to block many types of web attacks</td>
202
+ <td>Cookie (security)</td>
203
+ <td>1 Year</td>
204
+ </tr>
205
+ <tr>
146
206
  <td>inLiveChat</td>
147
207
  <td>Indicates whether user is connected to a live agent.</td>
148
208
  <td>Web Storage (functional)</td>
@@ -161,12 +221,30 @@ border: 1px solid;
161
221
  <td>Persistent</td>
162
222
  </tr>
163
223
  <tr>
224
+ <td>OptanonAlertBoxClosed</td>
225
+ <td>Used by Calendly to store OneTrust cookie consent preferences</td>
226
+ <td>Cookie (functional)</td>
227
+ <td>1 Year</td>
228
+ </tr>
229
+ <tr>
230
+ <td>OptanonConsent</td>
231
+ <td>Used by Calendly to store OneTrust cookie consent preferences</td>
232
+ <td>Cookie (functional)</td>
233
+ <td>2 Year</td>
234
+ </tr>
235
+ <tr>
164
236
  <td>parentOrigin</td>
165
237
  <td>Stores Chat iFrame parent window origin.</td>
166
238
  <td>Web Storage (functional)</td>
167
239
  <td>Persistent</td>
168
240
  </tr>
169
241
  <tr>
242
+ <td>PREF</td>
243
+ <td>Used by Youtube to store user preferences</td>
244
+ <td>Cookie (marketing)</td>
245
+ <td>8 months</td>
246
+ </tr>
247
+ <tr>
170
248
  <td>previouslyAuthenticated</td>
171
249
  <td>Used for Zendesk authentication functionality.</td>
172
250
  <td>Web Storage (functional)</td>
@@ -185,30 +263,84 @@ border: 1px solid;
185
263
  <td>Persistent</td>
186
264
  </tr>
187
265
  <tr>
266
+ <td>referrer_user_id</td>
267
+ <td>No description available</td>
268
+ <td>Cookie (analytics)</td>
269
+ <td>Session (as long as the browser application is open)</td>
270
+ </tr>
271
+ <tr>
272
+ <td>SAPISID</td>
273
+ <td>Used by Youtube to link content to your Google account</td>
274
+ <td>Cookie (analytics)</td>
275
+ <td>2 Years</td>
276
+ </tr>
277
+ <tr>
188
278
  <td>secretButton</td>
189
279
  <td>Used during Oracle handoffs to indicate whether the agent has sent a request for a secret message. Allows the state to persist between page changes.</td>
190
280
  <td>Web Storage (functional)</td>
191
281
  <td>Persistent</td>
192
282
  </tr>
193
283
  <tr>
284
+ <td>session</td>
285
+ <td>Used to keep the builder session active for 24 hours before authentication is required again. Note this is only added if a chatter has logged into the dashboard.</td>
286
+ <td>Web Storage (functional)</td>
287
+ <td>Persistent</td>
288
+ </tr>
289
+ <tr>
194
290
  <td>sessionToken</td>
195
291
  <td>Used for chatter authentication. This is stored on Ada domain.</td>
196
292
  <td>Web Storage (functional)</td>
197
293
  <td>Persistent</td>
198
294
  </tr>
199
295
  <tr>
296
+ <td>SID</td>
297
+ <td>Used by Youtube to provide advertisement targeting</td>
298
+ <td>Cookie (marketing)</td>
299
+ <td>2 Years</td>
300
+ </tr>
301
+ <tr>
302
+ <td>SIDCC</td>
303
+ <td>Used by Youtube to identify trusted web traffic</td>
304
+ <td>Cookie (security)</td>
305
+ <td>1 Year</td>
306
+ </tr>
307
+ <tr>
308
+ <td>SSID</td>
309
+ <td>Youtube uses this cookie for security purposes in order to block many types of web attacks</td>
310
+ <td>Cookie (security)</td>
311
+ <td>1 Year</td>
312
+ </tr>
313
+ <tr>
200
314
  <td>testBotPhoneNumber</td>
201
315
  <td>Used for voice chat functionality in the bot builder dashboard</td>
202
316
  <td>Web Storage (functional)</td>
203
317
  <td>Persistent</td>
204
318
  </tr>
205
319
  <tr>
320
+ <td>VISITOR_INFO1_LIVE</td>
321
+ <td>Used by Youtube to evaluate the user's network capabilities</td>
322
+ <td>Cookie (functional)</td>
323
+ <td>6 months</td>
324
+ </tr>
325
+ <tr>
206
326
  <td>vuid</td>
207
327
  <td>Used by Vimeo to store the user’s usage history (loaded only if a video has been included).</td>
208
328
  <td>Cookie (functional)</td>
209
329
  <td>2 Years</td>
210
330
  </tr>
211
331
  <tr>
332
+ <td>wide</td>
333
+ <td>Used by Youtube to store user preferences</td>
334
+ <td>Cookie (functional)</td>
335
+ <td>Session (as long as the browser application is open)</td>
336
+ </tr>
337
+ <tr>
338
+ <td>YSC</td>
339
+ <td>Used by Youtube to store user interactions</td>
340
+ <td>Cookie (marketing)</td>
341
+ <td>Session (as long as the browser application is open)</td>
342
+ </tr>
343
+ <tr>
212
344
  <td>zd_isChatterAuthenticated</td>
213
345
  <td>Used for Zendesk authentication functionality.</td>
214
346
  <td>Web Storage (functional)</td>
@@ -52,6 +52,8 @@ export interface StorageValueByKey {
52
52
  "backoffTimeout": number;
53
53
  /** Used during Oracle handoffs to indicate whether the agent has sent a request for a secret message. Allows the state to persist between page changes. */
54
54
  "secretButton": string;
55
+ /** Used to keep the builder session active for 24 hours before authentication is required again. Note this is only added if a chatter has logged into the dashboard. */
56
+ "session": string;
55
57
  /** Used for chatter authentication. This is stored on Ada domain. */
56
58
  "sessionToken": string;
57
59
  /** Used for voice chat functionality in the bot builder dashboard */
@@ -2,7 +2,7 @@ interface WebStorageItem {
2
2
  keyName: string;
3
3
  description: string;
4
4
  type: "Web Storage" | "Cookie";
5
- purpose: ReadonlyArray<"Essential" | "Functional" | "Security" | "Analytics">;
5
+ purpose: ReadonlyArray<"Essential" | "Functional" | "Security" | "Analytics" | "Marketing">;
6
6
  duration: string;
7
7
  }
8
8
  /**
@@ -34,6 +34,13 @@ exports.THIRD_PARTY_ITEMS = [
34
34
  duration: "Persistent",
35
35
  purpose: ["Essential"]
36
36
  },
37
+ {
38
+ keyName: "__cfruid",
39
+ description: "Used by Zendesk Messaging to filter malicious web traffic through Cloudflare",
40
+ type: "Cookie",
41
+ duration: "Session (as long as the browser application is open)",
42
+ purpose: ["Essential"]
43
+ },
37
44
  {
38
45
  keyName: "_MUTEX_LOCK_X_zendeskSessionLock",
39
46
  description: "Used by FastMutex for Zendesk Chat sessions.",
@@ -41,4 +48,144 @@ exports.THIRD_PARTY_ITEMS = [
41
48
  duration: "Duration of live agent chat",
42
49
  purpose: ["Essential"]
43
50
  },
51
+ {
52
+ keyName: "__Secure-[alphanumeric ID]",
53
+ description: "Used by Youtube to deliver relevant advertisements",
54
+ type: "Cookie",
55
+ duration: "1 Year",
56
+ purpose: ["Marketing"]
57
+ },
58
+ {
59
+ keyName: "HSID",
60
+ description: "Youtube uses this cookie for security purposes in order to block many types of web attacks",
61
+ type: "Cookie",
62
+ duration: "1 Year",
63
+ purpose: ["Security"]
64
+ },
65
+ {
66
+ keyName: "SSID",
67
+ description: "Youtube uses this cookie for security purposes in order to block many types of web attacks",
68
+ type: "Cookie",
69
+ duration: "1 Year",
70
+ purpose: ["Security"]
71
+ },
72
+ {
73
+ keyName: "VISITOR_INFO1_LIVE",
74
+ description: "Used by Youtube to evaluate the user's network capabilities",
75
+ type: "Cookie",
76
+ duration: "6 months",
77
+ purpose: ["Functional"]
78
+ },
79
+ {
80
+ keyName: "PREF",
81
+ description: "Used by Youtube to store user preferences",
82
+ type: "Cookie",
83
+ duration: "8 months",
84
+ purpose: ["Marketing"]
85
+ },
86
+ {
87
+ keyName: "SIDCC",
88
+ description: "Used by Youtube to identify trusted web traffic",
89
+ type: "Cookie",
90
+ duration: "1 Year",
91
+ purpose: ["Security"]
92
+ },
93
+ {
94
+ keyName: "YSC",
95
+ description: "Used by Youtube to store user interactions",
96
+ type: "Cookie",
97
+ duration: "Session (as long as the browser application is open)",
98
+ purpose: ["Marketing"]
99
+ },
100
+ {
101
+ keyName: "SID",
102
+ description: "Used by Youtube to provide advertisement targeting",
103
+ type: "Cookie",
104
+ duration: "2 Years",
105
+ purpose: ["Marketing"]
106
+ },
107
+ {
108
+ keyName: "SAPISID",
109
+ description: "Used by Youtube to link content to your Google account",
110
+ type: "Cookie",
111
+ duration: "2 Years",
112
+ purpose: ["Analytics"]
113
+ },
114
+ {
115
+ keyName: "APISID",
116
+ description: "Used by Youtube to gather information on played videos",
117
+ type: "Cookie",
118
+ duration: "1 Year",
119
+ purpose: ["Analytics"]
120
+ },
121
+ {
122
+ keyName: "wide",
123
+ description: "Used by Youtube to store user preferences",
124
+ type: "Cookie",
125
+ duration: "Session (as long as the browser application is open)",
126
+ purpose: ["Functional"]
127
+ },
128
+ {
129
+ keyName: "__cf_bm",
130
+ description: "Used by Vimeo to filter bots",
131
+ type: "Cookie",
132
+ duration: "1 Year",
133
+ purpose: ["Analytics"]
134
+ },
135
+ {
136
+ keyName: "_GRECAPTCHA",
137
+ description: "Used by Calendly to prevent spamming",
138
+ type: "Cookie",
139
+ duration: "6 months",
140
+ purpose: ["Functional"]
141
+ },
142
+ {
143
+ keyName: "_ga",
144
+ description: "Used by Calendly to track page views",
145
+ type: "Cookie",
146
+ duration: "1 Year",
147
+ purpose: ["Analytics"]
148
+ },
149
+ {
150
+ keyName: "_hp2_id.[user_id]",
151
+ description: "Used by Calendly to gather page interactions of users",
152
+ type: "Cookie",
153
+ duration: "1 Year",
154
+ purpose: ["Analytics"]
155
+ },
156
+ {
157
+ keyName: "_calendly_session",
158
+ description: "Used by Calendly to store user's preferences",
159
+ type: "Cookie",
160
+ duration: "15 days",
161
+ purpose: ["Functional"]
162
+ },
163
+ {
164
+ keyName: "__stripe_mid",
165
+ description: "Used by Calendly to prevent fraudulent transactions",
166
+ type: "Cookie",
167
+ duration: "1 Year",
168
+ purpose: ["Functional"]
169
+ },
170
+ {
171
+ keyName: "OptanonAlertBoxClosed",
172
+ description: "Used by Calendly to store OneTrust cookie consent preferences",
173
+ type: "Cookie",
174
+ duration: "1 Year",
175
+ purpose: ["Functional"]
176
+ },
177
+ {
178
+ keyName: "OptanonConsent",
179
+ description: "Used by Calendly to store OneTrust cookie consent preferences",
180
+ type: "Cookie",
181
+ duration: "2 Year",
182
+ purpose: ["Functional"]
183
+ },
184
+ {
185
+ keyName: "referrer_user_id",
186
+ description: "No description available",
187
+ type: "Cookie",
188
+ duration: "Session (as long as the browser application is open)",
189
+ purpose: ["Analytics"]
190
+ },
44
191
  ];
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@ada-support/web-storage",
3
- "version": "1.0.0",
3
+ "version": "1.1.0",
4
4
  "description": "A package to provide access to Web Storage API",
5
5
  "main": "dist/index.js",
6
6
  "publishConfig": {
@@ -76,6 +76,9 @@ export interface StorageValueByKey {
76
76
  /** Used during Oracle handoffs to indicate whether the agent has sent a request for a secret message. Allows the state to persist between page changes. */
77
77
  "secretButton": string;
78
78
 
79
+ /** Used to keep the builder session active for 24 hours before authentication is required again. Note this is only added if a chatter has logged into the dashboard. */
80
+ "session": string;
81
+
79
82
  /** Used for chatter authentication. This is stored on Ada domain. */
80
83
  "sessionToken": string;
81
84
 
@@ -2,7 +2,7 @@ interface WebStorageItem {
2
2
  keyName: string;
3
3
  description: string;
4
4
  type: "Web Storage" | "Cookie";
5
- purpose: ReadonlyArray<"Essential" | "Functional" | "Security" | "Analytics">;
5
+ purpose: ReadonlyArray<"Essential" | "Functional" | "Security" | "Analytics" | "Marketing">;
6
6
  duration: string;
7
7
  }
8
8
 
@@ -39,6 +39,13 @@ export const THIRD_PARTY_ITEMS: WebStorageItem[] = [
39
39
  duration: "Persistent",
40
40
  purpose: ["Essential"],
41
41
  },
42
+ {
43
+ keyName: "__cfruid",
44
+ description: "Used by Zendesk Messaging to filter malicious web traffic through Cloudflare",
45
+ type: "Cookie",
46
+ duration: "Session (as long as the browser application is open)",
47
+ purpose: ["Essential"],
48
+ },
42
49
  {
43
50
  keyName: "_MUTEX_LOCK_X_zendeskSessionLock",
44
51
  description: "Used by FastMutex for Zendesk Chat sessions.",
@@ -46,4 +53,145 @@ export const THIRD_PARTY_ITEMS: WebStorageItem[] = [
46
53
  duration: "Duration of live agent chat",
47
54
  purpose: ["Essential"],
48
55
  },
56
+ {
57
+ keyName: "__Secure-[alphanumeric ID]",
58
+ description: "Used by Youtube to deliver relevant advertisements",
59
+ type: "Cookie",
60
+ duration: "1 Year",
61
+ purpose: ["Marketing"],
62
+ },
63
+ {
64
+ keyName: "HSID",
65
+ description: "Youtube uses this cookie for security purposes in order to block many types of web attacks",
66
+ type: "Cookie",
67
+ duration: "1 Year",
68
+ purpose: ["Security"],
69
+ },
70
+ {
71
+ keyName: "SSID",
72
+ description: "Youtube uses this cookie for security purposes in order to block many types of web attacks",
73
+ type: "Cookie",
74
+ duration: "1 Year",
75
+ purpose: ["Security"],
76
+ },
77
+ {
78
+ keyName: "VISITOR_INFO1_LIVE",
79
+ description: "Used by Youtube to evaluate the user's network capabilities",
80
+ type: "Cookie",
81
+ duration: "6 months",
82
+ purpose: ["Functional"],
83
+ },
84
+ {
85
+ keyName: "PREF",
86
+ description: "Used by Youtube to store user preferences",
87
+ type: "Cookie",
88
+ duration: "8 months",
89
+ purpose: ["Marketing"],
90
+ },
91
+ {
92
+ keyName: "SIDCC",
93
+ description: "Used by Youtube to identify trusted web traffic",
94
+ type: "Cookie",
95
+ duration: "1 Year",
96
+ purpose: ["Security"],
97
+ },
98
+ {
99
+ keyName: "YSC",
100
+ description: "Used by Youtube to store user interactions",
101
+ type: "Cookie",
102
+ duration: "Session (as long as the browser application is open)",
103
+ purpose: ["Marketing"],
104
+ },
105
+ {
106
+ keyName: "SID",
107
+ description: "Used by Youtube to provide advertisement targeting",
108
+ type: "Cookie",
109
+ duration: "2 Years",
110
+ purpose: ["Marketing"],
111
+ },
112
+ {
113
+ keyName: "SAPISID",
114
+ description: "Used by Youtube to link content to your Google account",
115
+ type: "Cookie",
116
+ duration: "2 Years",
117
+ purpose: ["Analytics"],
118
+ },
119
+ {
120
+ keyName: "APISID",
121
+ description: "Used by Youtube to gather information on played videos",
122
+ type: "Cookie",
123
+ duration: "1 Year",
124
+ purpose: ["Analytics"],
125
+ },
126
+ {
127
+ keyName: "wide",
128
+ description: "Used by Youtube to store user preferences",
129
+ type: "Cookie",
130
+ duration: "Session (as long as the browser application is open)",
131
+ purpose: ["Functional"],
132
+ },
133
+ {
134
+ keyName: "__cf_bm",
135
+ description: "Used by Vimeo to filter bots",
136
+ type: "Cookie",
137
+ duration: "1 Year",
138
+ purpose: ["Analytics"],
139
+ },
140
+ {
141
+ keyName: "_GRECAPTCHA",
142
+ description: "Used by Calendly to prevent spamming",
143
+ type: "Cookie",
144
+ duration: "6 months",
145
+ purpose: ["Functional"],
146
+ },
147
+ {
148
+ keyName: "_ga",
149
+ description: "Used by Calendly to track page views",
150
+ type: "Cookie",
151
+ duration: "1 Year",
152
+ purpose: ["Analytics"],
153
+ },
154
+ {
155
+ keyName: "_hp2_id.[user_id]",
156
+ description: "Used by Calendly to gather page interactions of users",
157
+ type: "Cookie",
158
+ duration: "1 Year",
159
+ purpose: ["Analytics"],
160
+ },
161
+ {
162
+ keyName: "_calendly_session",
163
+ description: "Used by Calendly to store user's preferences",
164
+ type: "Cookie",
165
+ duration: "15 days",
166
+ purpose: ["Functional"],
167
+ },
168
+ {
169
+ keyName: "__stripe_mid",
170
+ description: "Used by Calendly to prevent fraudulent transactions",
171
+ type: "Cookie",
172
+ duration: "1 Year",
173
+ purpose: ["Functional"],
174
+ },
175
+ {
176
+ keyName: "OptanonAlertBoxClosed",
177
+ description: "Used by Calendly to store OneTrust cookie consent preferences",
178
+ type: "Cookie",
179
+ duration: "1 Year",
180
+ purpose: ["Functional"],
181
+ },
182
+ {
183
+ keyName: "OptanonConsent",
184
+ description: "Used by Calendly to store OneTrust cookie consent preferences",
185
+ type: "Cookie",
186
+ duration: "2 Year",
187
+ purpose: ["Functional"],
188
+ },
189
+ {
190
+ keyName: "referrer_user_id",
191
+ description: "No description available",
192
+ type: "Cookie",
193
+ duration: "Session (as long as the browser application is open)",
194
+ purpose: ["Analytics"],
195
+ },
196
+
49
197
  ];