@dargmuesli/nuxt-vio 23.1.4 → 23.1.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -16,14 +16,24 @@ export const NUXT_PUBLIC_SENTRY_PROJECT_PUBLIC_KEY =
16
16
  process.env.NUXT_PUBLIC_SENTRY_PROJECT_PUBLIC_KEY || ''
17
17
  export const NUXT_PUBLIC_SENTRY_RELEASE = process.env.RELEASE_NAME
18
18
 
19
- // v11's `dataCollection` collects more personal data by default than v10 did. This floor restores
20
- // the previous, restrictive behavior for the categories v11 started to collect, without redefining
21
- // Sentry's other defaults. Extending projects can relax or tighten any category through
22
- // `runtimeConfig.public.sentry.dataCollection`, which is merged over this floor.
19
+ // Sentry's extended denylist for GDPR-subject projects: keys carrying IP addresses, user ids, or
20
+ // origin hosts (matched as case-insensitive substrings, on top of the built-in credential scrubbing)
21
+ const SENTRY_DATA_COLLECTION_GDPR_DENY = [
22
+ 'forwarded',
23
+ '-ip',
24
+ 'remote-',
25
+ 'via',
26
+ '-user',
27
+ ]
28
+
29
+ // v11's `dataCollection` collects more personal data by default than v10 did. This floor pins the
30
+ // categories v11 switched on to their previous, restrictive values and applies the GDPR denylist
31
+ // above to headers, cookies, and query params. Extending projects can relax or tighten any category
32
+ // through `runtimeConfig.public.sentry.dataCollection`, which is merged over this floor.
23
33
  const SENTRY_DATA_COLLECTION_FLOOR: NonNullable<
24
34
  Parameters<typeof Sentry.init>[0]['dataCollection']
25
35
  > = {
26
- cookies: false,
36
+ cookies: { deny: SENTRY_DATA_COLLECTION_GDPR_DENY },
27
37
  databaseQueryData: false,
28
38
  genAI: {
29
39
  inputs: false,
@@ -34,7 +44,13 @@ const SENTRY_DATA_COLLECTION_FLOOR: NonNullable<
34
44
  variables: false,
35
45
  },
36
46
  httpBodies: [],
47
+ httpHeaders: {
48
+ request: { deny: SENTRY_DATA_COLLECTION_GDPR_DENY },
49
+ response: { deny: SENTRY_DATA_COLLECTION_GDPR_DENY },
50
+ },
51
+ queues: false,
37
52
  userInfo: false,
53
+ urlQueryParams: { deny: SENTRY_DATA_COLLECTION_GDPR_DENY },
38
54
  }
39
55
 
40
56
  export const getSharedSentryConfig = ({
package/package.json CHANGED
@@ -8,7 +8,7 @@
8
8
  "@lucide/vue": "1.59.0",
9
9
  "@nuxt/devtools": "3.4.4",
10
10
  "@nuxt/eslint": "1.17.0",
11
- "@nuxt/image": "2.1.0",
11
+ "@nuxt/image": "2.2.0",
12
12
  "@nuxtjs/color-mode": "4.0.1",
13
13
  "@nuxtjs/html-validator": "2.1.0",
14
14
  "@nuxtjs/i18n": "10.6.0",
@@ -105,7 +105,7 @@
105
105
  "url": "git+https://github.com/dargmuesli/vio.git"
106
106
  },
107
107
  "type": "module",
108
- "version": "23.1.4",
108
+ "version": "23.1.5",
109
109
  "scripts": {
110
110
  "build": "pnpm run build:node",
111
111
  "build:node": "NUXT_PUBLIC_I18N_BASE_URL=https://app.localhost:3001 nuxt build playground",