@constructor-io/constructorio-node 4.6.9 → 4.7.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@constructor-io/constructorio-node",
-  "version": "4.6.9",
+  "version": "4.7.0",
   "description": "Constructor.io Node.js client",
   "main": "src/constructorio.js",
   "types": "src/types/constructorio.d.ts",

package/src/modules/tracker.js

@@ -83,6 +83,9 @@ function send(url, userParameters, networkParameters, method = 'GET', body = {})
   const { signal } = controller;
   const headers = {};
 
+  // PII Detection
+  if (helpers.requestContainsPii(url)) return;
+
   Object.assign(headers, helpers.combineCustomHeaders(this.options, networkParameters));
 
   // Append security token as 'x-cnstrc-token' if available

package/src/utils/helpers.js

@@ -1,4 +1,12 @@
 /* eslint-disable no-param-reassign */
+const PII_REGEX = {
+  email: /^[\w\-+\\.]+@([\w-]+\.)+[\w-]{2,4}$/,
+  phoneNumber: /^(?:\+\d{11,12}|\+\d{1,3}\s\d{3}\s\d{3}\s\d{3,4}|\(\d{3}\)\d{7}|\(\d{3}\)\s\d{3}\s\d{4}|\(\d{3}\)\d{3}-\d{4}|\(\d{3}\)\s\d{3}-\d{4})$/,
+  creditCard:
+    /^(?:4[0-9]{12}(?:[0-9]{3})?|(?:5[1-5][0-9]{2}|222[1-9]|22[3-9][0-9]|2[3-6][0-9]{2}|27[01][0-9]|2720)[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|6(?:011|5[0-9]{2})[0-9]{12}|(?:2131|1800|35\d{3})\d{11})$/, // Visa, Mastercard, Amex, Discover, JCB and Diners Club, regex source: https://www.regular-expressions.info/creditcard.html
+  // Add more PII REGEX
+};
+
 const utils = {
   trimNonBreakingSpaces: (string) => string.replace(/\s/g, ' ').trim(),
 
@@ -75,6 +83,33 @@ const utils = {
 
     return { ...optionsHeaders, ...networkParametersHeaders };
   },
+
+  containsPii(query) {
+    const piiRegex = Object.values(PII_REGEX);
+    const normalizedQuery = query.toLowerCase();
+
+    return piiRegex.some((regex) => regex.test(normalizedQuery));
+  },
+
+  requestContainsPii(urlString) {
+    try {
+      const url = new URL(urlString);
+      const paths = decodeURIComponent(url?.pathname)?.split('/');
+      const paramValues = decodeURIComponent(url?.search)?.split('&').map((param) => param?.split('=')?.[1]);
+
+      if (paths.some((path) => utils.containsPii(path))) {
+        return true;
+      }
+
+      if (paramValues.some((value) => utils.containsPii(value))) {
+        return true;
+      }
+    } catch (e) {
+      // do nothing
+    }
+
+    return false;
+  },
 };
 
 module.exports = utils;