@funnelsgrove/payments 0.1.25 → 0.1.26

package/dist/services/stripe.service.js

@@ -527,12 +527,50 @@ export const resolveCheckoutPlanRecurringConfig = (plan) => {
         inferCheckoutPlanRecurringFromText(plan.id) ||
         inferCheckoutPlanRecurringFromText(plan.description));
 };
-const normalizeAnalyticsMetadata = (metadata) => {
-    if (!metadata || !isRecord(metadata)) {
+const SENSITIVE_CHECKOUT_URL_QUERY_KEYS = new Set([
+    'customeremail',
+    'customer_email',
+    'email',
+    'fullname',
+    'full_name',
+    'name',
+    'phone',
+    'phonenumber',
+    'phone_number',
+]);
+const sanitizeCheckoutUrl = (value) => {
+    if (typeof value !== 'string') {
+        return undefined;
+    }
+    const trimmed = value.trim();
+    if (!trimmed) {
         return undefined;
     }
-    const normalized = Object.fromEntries(Object.entries(metadata).filter(([, value]) => value !== undefined && value !== null && value !== ''));
-    return Object.keys(normalized).length > 0 ? normalized : undefined;
+    try {
+        const parsed = new URL(trimmed, typeof window !== 'undefined' ? window.location.origin : 'https://example.invalid');
+        for (const key of Array.from(parsed.searchParams.keys())) {
+            if (SENSITIVE_CHECKOUT_URL_QUERY_KEYS.has(key.trim().toLowerCase())) {
+                parsed.searchParams.delete(key);
+            }
+        }
+        return parsed.toString();
+    }
+    catch (_a) {
+        return trimmed;
+    }
+};
+const currentCheckoutUrl = () => {
+    var _a;
+    if (typeof window === 'undefined') {
+        return undefined;
+    }
+    return sanitizeCheckoutUrl((_a = window.location) === null || _a === void 0 ? void 0 : _a.href);
+};
+const normalizeAnalyticsMetadata = (metadata) => {
+    const normalized = Object.fromEntries(Object.entries(isRecord(metadata) ? metadata : {}).filter(([, value]) => value !== undefined && value !== null && value !== ''));
+    const checkoutUrl = sanitizeCheckoutUrl(normalized.url) || currentCheckoutUrl();
+    const withCheckoutUrl = checkoutUrl ? Object.assign(Object.assign({}, normalized), { url: checkoutUrl }) : normalized;
+    return Object.keys(withCheckoutUrl).length > 0 ? withCheckoutUrl : undefined;
 };
 export async function createStripePaymentIntent(input) {
     var _a, _b;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@funnelsgrove/payments",
-  "version": "0.1.25",
+  "version": "0.1.26",
   "type": "module",
   "private": false,
   "main": "./dist/index.js",