@belvador/core 0.4.0 → 0.4.1

package/dist/privacy.js

@@ -83,7 +83,25 @@ const PROVIDER_KEY = /\b[sr]k_(?:live|test)_[A-Za-z0-9]{8,}\b/g;
 const JWT = /\beyJ[A-Za-z0-9_-]{4,}\.[A-Za-z0-9_-]{4,}\.[A-Za-z0-9_-]{4,}/g;
 const CARD = /\b(?:\d[ -]?){12,18}\d\b/g;
 const EMAIL = /\b[A-Za-z0-9._%+-]{1,64}@([A-Za-z0-9-]{1,63}(?:\.[A-Za-z0-9-]{1,63})*\.[A-Za-z]{2,24})\b/g;
+/** The same address percent-encoded in a URL (`linh%40example.com`). */
+const EMAIL_ENCODED = /\b(?:[A-Za-z0-9._+-]|%[0-9A-Fa-f]{2}){1,64}%40([A-Za-z0-9-]{1,63}(?:\.[A-Za-z0-9-]{1,63})*\.[A-Za-z]{2,24})\b/gi;
 const USERINFO = /\b([a-z][a-z0-9+.-]{1,15}:\/\/)[^\s/?#@]+@/gi;
+/** A dotted IPv4 in free text, not inside a longer dotted number or a word (`v1.2.3.4`). */
+const IPV4_TEXT = /(^|[^0-9A-Za-z.])(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(?![0-9A-Za-z]|\.\d)/g;
+/**
+ * Private, CGNAT, loopback, link-local, unspecified and multicast/reserved addresses name
+ * infrastructure (`ECONNREFUSED 10.0.3.17:5432`) and stay readable; any other IPv4 may be a client.
+ */
+function isInfrastructureV4(a, b) {
+    return (a === 0 ||
+        a === 10 ||
+        a === 127 ||
+        a >= 224 ||
+        (a === 100 && b >= 64 && b <= 127) ||
+        (a === 169 && b === 254) ||
+        (a === 172 && b >= 16 && b <= 31) ||
+        (a === 192 && b === 168));
+}
 /** name=value inside URLs, query strings and log lines. */
 const PARAM = /([A-Za-z0-9_.~%[\]-]{1,128})=([^&#\s"'<>,;]*)/g;
 /** `Basic <base64>` credentials in headers and log lines. */
@@ -154,7 +172,9 @@ export function scrubText(text) {
         .replace(PROVIDER_KEY, FILTERED)
         .replace(JWT, FILTERED)
         .replace(CARD, (m) => (luhn(m.replace(/[ -]/g, "")) ? FILTERED : m))
-        .replace(EMAIL, (_m, domain) => `${FILTERED}@${domain}`);
+        .replace(EMAIL, (_m, domain) => `${FILTERED}@${domain}`)
+        .replace(EMAIL_ENCODED, (_m, domain) => `${FILTERED}%40${domain}`)
+        .replace(IPV4_TEXT, (all, lead, a, b, c) => isInfrastructureV4(Number(a), Number(b)) ? all : `${lead}${a}.${b}.${c}.0`);
 }
 function readKey(obj, key) {
     try {

package/dist/version.d.ts

@@ -1,3 +1,3 @@
-export declare const SDK_VERSION = "0.4.0";
+export declare const SDK_VERSION = "0.4.1";
 /** The audited engine version every package pins exactly (research/05-decisions.md D3). */
 export declare const ENGINE_VERSION = "10.76.2";

package/dist/version.js

@@ -1,6 +1,6 @@
 // One version for every @belvador/* package (lockstep). Changed only by
 // `bun scripts/set-version.ts`; tests compare it with every package.json and
 // with src/content/sdk-matrix.ts in the web app.
-export const SDK_VERSION = "0.4.0";
+export const SDK_VERSION = "0.4.1";
 /** The audited engine version every package pins exactly (research/05-decisions.md D3). */
 export const ENGINE_VERSION = "10.76.2";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@belvador/core",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Internal building blocks of the Belvador SDK (privacy, sending policy). Install @belvador/browser, @belvador/react, @belvador/cloudflare or @belvador/tanstack-start instead.",
   "license": "MIT",
   "author": "Belvador (https://belvador.dev)",