@kubesense/kubesense-browser-rum-core 1.7.0 → 2.0.0-beta.1

package/cjs/domain/plugins.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugins.js","sourceRoot":"","sources":["../../src/domain/plugins.ts"],"names":[],"mappings":";;AA4CA,8CAcC;AAdD,SAAgB,iBAAiB,CAC/B,OAAgC,EAChC,UAAsB,EACtB,SAAc;IAEd,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAM;IACR,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAA;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,SAAS,CAAC,CAAA;QACnB,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"plugins.js","names":["isThenable"],"sources":["../../src/domain/plugins.ts"],"sourcesContent":["import { isThenable } from '@kubesense/kubesense-browser-core'\nimport type { RumPublicApi } from '../boot/rumPublicApi'\nimport type { StartRumResult } from '../boot/startRum'\nimport type { RumInitConfiguration } from './configuration'\nimport type { AssembleHook } from './hooks'\n\n/**\n * onInit plugin API options.\n *\n * @experimental\n */\nexport interface RumPluginOnInitOptions {\n  initConfiguration: RumInitConfiguration\n  publicApi: RumPublicApi\n  /**\n   * Register a callback invoked when a RUM event is assembled, so plugins can enrich or override\n   * event fields before they are sent. Callbacks registered in `onInit` run before any event is\n   * assembled, including events buffered during the pre-start phase.\n   */\n  registerAssembleEventHook: AssembleHook['register']\n}\n\n/**\n * onRumStart plugin API options.\n *\n * @experimental\n */\nexport interface OnRumStartOptions {\n  /**\n   * Add an event to the RUM browser SDK.\n   */\n  addEvent?: StartRumResult['addEvent']\n  /**\n   * Add a custom error to the RUM browser SDK.\n   */\n  addError?: StartRumResult['addError']\n}\n\n/**\n * Plugin interface of the RUM browser SDK.\n *\n * The plugins API is unstable and experimental, and may change without\n * notice. Please use only plugins provided by KubeSense matching the version of the SDK you are\n * using.\n *\n * `onInit` may abort the SDK initialization by returning (or resolving to) `false`. All plugins'\n * `onInit` are called concurrently and independently; a Promise defers the actual initialization\n * until it resolves, but does not delay any other plugin's `onInit` call.\n *\n * @experimental\n */\nexport interface RumPlugin {\n  name: string\n  getConfigurationTelemetry?(): Record<string, unknown>\n  onInit?(options: RumPluginOnInitOptions): false | void | Promise<false | void>\n  onRumStart?(options: OnRumStartOptions): void\n}\n\n/**\n * Calls every plugin's `onInit` method concurrently, without waiting for one to resolve before\n * calling the next. Stays synchronous as long as no plugin returns a thenable.\n * Returns `false` if any plugin returned (or resolved to) `false`, `true` otherwise.\n */\nexport function callPluginsOnInit(\n  plugins: RumPlugin[] | undefined,\n  parameter: RumPluginOnInitOptions\n): boolean | Promise<boolean> {\n  if (!plugins) {\n    return true\n  }\n\n  const results = plugins.map((plugin) => plugin.onInit?.(parameter))\n\n  if (results.some(isThenable)) {\n    return Promise.all(results as Array<Promise<false | void>>).then((results) => !results.includes(false))\n  }\n\n  return !results.includes(false)\n}\n\n/**\n * Calls each plugin's `onRumStart` method in order.\n */\nexport function callPluginsOnRumStart(plugins: RumPlugin[] | undefined, options: OnRumStartOptions): void {\n  for (const plugin of plugins ?? []) {\n    plugin.onRumStart?.(options)\n  }\n}\n"],"mappings":";;;;;;;AA+DA,SAAgB,kBACd,SACA,WAC4B;CAC5B,IAAI,CAAC,SACH,OAAO;CAGT,MAAM,UAAU,QAAQ,KAAK,WAAW,OAAO,SAAS,SAAS,CAAC;CAElE,IAAI,QAAQ,KAAKA,kCAAAA,UAAU,GACzB,OAAO,QAAQ,IAAI,OAAuC,CAAC,CAAC,MAAM,YAAY,CAAC,QAAQ,SAAS,KAAK,CAAC;CAGxG,OAAO,CAAC,QAAQ,SAAS,KAAK;AAChC;;;;AAKA,SAAgB,sBAAsB,SAAkC,SAAkC;CACxG,KAAK,MAAM,UAAU,WAAW,CAAC,GAC/B,OAAO,aAAa,OAAO;AAE/B"}

package/cjs/domain/privacy.d.ts

@@ -29,7 +29,12 @@ export declare function getNodeSelfPrivacyLevel(node: Node): NodePrivacyLevel |
  */
 export declare function shouldMaskNode(node: Node, privacyLevel: NodePrivacyLevel): boolean;
 export declare function shouldMaskAttribute(tagName: string, attributeName: string, attributeValue: string | null, nodePrivacyLevel: NodePrivacyLevel, configuration: RumConfiguration): boolean;
-export declare function getTextContent(textNode: Node, parentNodePrivacyLevel: NodePrivacyLevel): string | undefined;
+/**
+ * Text censoring non-destructively maintains whitespace characters in order to preserve text shape
+ * during replay.
+ */
+export declare function censorText(text: string): string;
+export declare function getTextContent(textNode: Node, parentNodePrivacyLevel: NodePrivacyLevel): string;
 /**
  * TODO: Preserve CSS element order, and record the presence of the tag, just don't render
  * We don't need this logic on the recorder side.

package/cjs/domain/privacy.js

@@ -1,313 +1,170 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getNodePrivacyLevel = getNodePrivacyLevel;
-exports.reducePrivacyLevel = reducePrivacyLevel;
-exports.getNodeSelfPrivacyLevel = getNodeSelfPrivacyLevel;
-exports.shouldMaskNode = shouldMaskNode;
-exports.shouldMaskAttribute = shouldMaskAttribute;
-exports.getTextContent = getTextContent;
-exports.shouldIgnoreElement = shouldIgnoreElement;
-exports.isAllowlisted = isAllowlisted;
-exports.maskDisallowedTextContent = maskDisallowedTextContent;
-const htmlDomUtils_1 = require("../browser/htmlDomUtils");
-const privacyConstants_1 = require("./privacyConstants");
-const getSelectorFromElement_1 = require("./getSelectorFromElement");
+const require_htmlDomUtils = require("../browser/htmlDomUtils.js");
+const require_getSelectorFromElement = require("./getSelectorFromElement.js");
+const require_privacyConstants = require("./privacyConstants.js");
+//#region src/domain/privacy.ts
 /**
- * Get node privacy level by iterating over its ancestors. When the direct parent privacy level is
- * know, it is best to use something like:
- *
- * derivePrivacyLevelGivenParent(getNodeSelfPrivacyLevel(node), parentNodePrivacyLevel)
- */
+* Get node privacy level by iterating over its ancestors. When the direct parent privacy level is
+* know, it is best to use something like:
+*
+* derivePrivacyLevelGivenParent(getNodeSelfPrivacyLevel(node), parentNodePrivacyLevel)
+*/
 function getNodePrivacyLevel(node, defaultPrivacyLevel, cache) {
-    if (cache && cache.has(node)) {
-        return cache.get(node);
-    }
-    const parentNode = (0, htmlDomUtils_1.getParentNode)(node);
-    const parentNodePrivacyLevel = parentNode
-        ? getNodePrivacyLevel(parentNode, defaultPrivacyLevel, cache)
-        : defaultPrivacyLevel;
-    const selfNodePrivacyLevel = getNodeSelfPrivacyLevel(node);
-    const nodePrivacyLevel = reducePrivacyLevel(selfNodePrivacyLevel, parentNodePrivacyLevel);
-    if (cache) {
-        cache.set(node, nodePrivacyLevel);
-    }
-    return nodePrivacyLevel;
+	if (cache?.has(node)) return cache.get(node);
+	const parentNode = require_htmlDomUtils.getParentNode(node);
+	const parentNodePrivacyLevel = parentNode ? getNodePrivacyLevel(parentNode, defaultPrivacyLevel, cache) : defaultPrivacyLevel;
+	const nodePrivacyLevel = reducePrivacyLevel(getNodeSelfPrivacyLevel(node), parentNodePrivacyLevel);
+	if (cache) cache.set(node, nodePrivacyLevel);
+	return nodePrivacyLevel;
 }
 /**
- * Reduces the next privacy level based on self + parent privacy levels
- */
+* Reduces the next privacy level based on self + parent privacy levels
+*/
 function reducePrivacyLevel(childPrivacyLevel, parentNodePrivacyLevel) {
-    switch (parentNodePrivacyLevel) {
-        // These values cannot be overridden
-        case privacyConstants_1.NodePrivacyLevel.HIDDEN:
-        case privacyConstants_1.NodePrivacyLevel.IGNORE:
-            return parentNodePrivacyLevel;
-    }
-    switch (childPrivacyLevel) {
-        case privacyConstants_1.NodePrivacyLevel.ALLOW:
-        case privacyConstants_1.NodePrivacyLevel.MASK:
-        case privacyConstants_1.NodePrivacyLevel.MASK_USER_INPUT:
-        case privacyConstants_1.NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED:
-        case privacyConstants_1.NodePrivacyLevel.HIDDEN:
-        case privacyConstants_1.NodePrivacyLevel.IGNORE:
-            return childPrivacyLevel;
-        default:
-            return parentNodePrivacyLevel;
-    }
+	switch (parentNodePrivacyLevel) {
+		case require_privacyConstants.NodePrivacyLevel.HIDDEN:
+		case require_privacyConstants.NodePrivacyLevel.IGNORE: return parentNodePrivacyLevel;
+	}
+	switch (childPrivacyLevel) {
+		case require_privacyConstants.NodePrivacyLevel.ALLOW:
+		case require_privacyConstants.NodePrivacyLevel.MASK:
+		case require_privacyConstants.NodePrivacyLevel.MASK_USER_INPUT:
+		case require_privacyConstants.NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED:
+		case require_privacyConstants.NodePrivacyLevel.HIDDEN:
+		case require_privacyConstants.NodePrivacyLevel.IGNORE: return childPrivacyLevel;
+		default: return parentNodePrivacyLevel;
+	}
 }
 /**
- * Determines the node's own privacy level without checking for ancestors.
- */
+* Determines the node's own privacy level without checking for ancestors.
+*/
 function getNodeSelfPrivacyLevel(node) {
-    // Only Element types can have a privacy level set
-    if (!(0, htmlDomUtils_1.isElementNode)(node)) {
-        return;
-    }
-    // Overrules for replay purpose
-    if (node.tagName === 'BASE') {
-        return privacyConstants_1.NodePrivacyLevel.ALLOW;
-    }
-    // Overrules to enforce end-user protection
-    if (node.tagName === 'INPUT') {
-        const inputElement = node;
-        if (inputElement.type === 'password' || inputElement.type === 'email' || inputElement.type === 'tel') {
-            return privacyConstants_1.NodePrivacyLevel.MASK;
-        }
-        if (inputElement.type === 'hidden') {
-            return privacyConstants_1.NodePrivacyLevel.MASK;
-        }
-        const autocomplete = inputElement.getAttribute('autocomplete');
-        // Handle input[autocomplete=cc-number/cc-csc/cc-exp/cc-exp-month/cc-exp-year/new-password/current-password]
-        if (autocomplete && (autocomplete.startsWith('cc-') || autocomplete.endsWith('-password'))) {
-            return privacyConstants_1.NodePrivacyLevel.MASK;
-        }
-    }
-    // Check HTML privacy attributes and classes
-    if (node.matches((0, privacyConstants_1.getPrivacySelector)(privacyConstants_1.NodePrivacyLevel.HIDDEN))) {
-        return privacyConstants_1.NodePrivacyLevel.HIDDEN;
-    }
-    if (node.matches((0, privacyConstants_1.getPrivacySelector)(privacyConstants_1.NodePrivacyLevel.MASK))) {
-        return privacyConstants_1.NodePrivacyLevel.MASK;
-    }
-    if (node.matches((0, privacyConstants_1.getPrivacySelector)(privacyConstants_1.NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED))) {
-        return privacyConstants_1.NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED;
-    }
-    if (node.matches((0, privacyConstants_1.getPrivacySelector)(privacyConstants_1.NodePrivacyLevel.MASK_USER_INPUT))) {
-        return privacyConstants_1.NodePrivacyLevel.MASK_USER_INPUT;
-    }
-    if (node.matches((0, privacyConstants_1.getPrivacySelector)(privacyConstants_1.NodePrivacyLevel.ALLOW))) {
-        return privacyConstants_1.NodePrivacyLevel.ALLOW;
-    }
-    if (shouldIgnoreElement(node)) {
-        return privacyConstants_1.NodePrivacyLevel.IGNORE;
-    }
+	if (!require_htmlDomUtils.isElementNode(node)) return;
+	if (node.tagName === "BASE") return require_privacyConstants.NodePrivacyLevel.ALLOW;
+	if (node.tagName === "INPUT") {
+		const inputElement = node;
+		if (inputElement.type === "password" || inputElement.type === "email" || inputElement.type === "tel") return require_privacyConstants.NodePrivacyLevel.MASK;
+		if (inputElement.type === "hidden") return require_privacyConstants.NodePrivacyLevel.MASK;
+		const autocomplete = inputElement.getAttribute("autocomplete");
+		if (autocomplete && (autocomplete.startsWith("cc-") || autocomplete.endsWith("-password"))) return require_privacyConstants.NodePrivacyLevel.MASK;
+	}
+	if (node.matches(require_privacyConstants.getPrivacySelector(require_privacyConstants.NodePrivacyLevel.HIDDEN))) return require_privacyConstants.NodePrivacyLevel.HIDDEN;
+	if (node.matches(require_privacyConstants.getPrivacySelector(require_privacyConstants.NodePrivacyLevel.MASK))) return require_privacyConstants.NodePrivacyLevel.MASK;
+	if (node.matches(require_privacyConstants.getPrivacySelector(require_privacyConstants.NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED))) return require_privacyConstants.NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED;
+	if (node.matches(require_privacyConstants.getPrivacySelector(require_privacyConstants.NodePrivacyLevel.MASK_USER_INPUT))) return require_privacyConstants.NodePrivacyLevel.MASK_USER_INPUT;
+	if (node.matches(require_privacyConstants.getPrivacySelector(require_privacyConstants.NodePrivacyLevel.ALLOW))) return require_privacyConstants.NodePrivacyLevel.ALLOW;
+	if (shouldIgnoreElement(node)) return require_privacyConstants.NodePrivacyLevel.IGNORE;
 }
 /**
- * Helper aiming to unify `mask` and `mask-user-input` privacy levels:
- *
- * In the `mask` case, it is trivial: we should mask the element.
- *
- * In the `mask-user-input` case, we should mask the element only if it is a "form" element or the
- * direct parent is a form element for text nodes).
- *
- * Other `shouldMaskNode` cases are edge cases that should not matter too much (ex: should we mask a
- * node if it is ignored or hidden? it doesn't matter since it won't be serialized).
- */
+* Helper aiming to unify `mask` and `mask-user-input` privacy levels:
+*
+* In the `mask` case, it is trivial: we should mask the element.
+*
+* In the `mask-user-input` case, we should mask the element only if it is a "form" element or the
+* direct parent is a form element for text nodes).
+*
+* Other `shouldMaskNode` cases are edge cases that should not matter too much (ex: should we mask a
+* node if it is ignored or hidden? it doesn't matter since it won't be serialized).
+*/
 function shouldMaskNode(node, privacyLevel) {
-    switch (privacyLevel) {
-        case privacyConstants_1.NodePrivacyLevel.MASK:
-        case privacyConstants_1.NodePrivacyLevel.HIDDEN:
-        case privacyConstants_1.NodePrivacyLevel.IGNORE:
-            return true;
-        case privacyConstants_1.NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED:
-            if ((0, htmlDomUtils_1.isTextNode)(node)) {
-                // Always return true if our parent is a form element, like MASK_USER_INPUT.
-                // Otherwise, decide whether to mask based on the allowlist.
-                return isFormElement(node.parentNode) ? true : !isAllowlisted(node.textContent || '');
-            }
-            // Always return true if we're a form element, like MASK_USER_INPUT.
-            // Otherwise, return false; MASK_UNLESS_ALLOWLISTED only directly masks text nodes.
-            return isFormElement(node);
-        case privacyConstants_1.NodePrivacyLevel.MASK_USER_INPUT:
-            return (0, htmlDomUtils_1.isTextNode)(node) ? isFormElement(node.parentNode) : isFormElement(node);
-        default:
-            return false;
-    }
+	switch (privacyLevel) {
+		case require_privacyConstants.NodePrivacyLevel.MASK:
+		case require_privacyConstants.NodePrivacyLevel.HIDDEN:
+		case require_privacyConstants.NodePrivacyLevel.IGNORE: return true;
+		case require_privacyConstants.NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED:
+			if (require_htmlDomUtils.isTextNode(node)) return isFormElement(node.parentNode) ? true : !isAllowlisted(node.textContent || "");
+			return isFormElement(node);
+		case require_privacyConstants.NodePrivacyLevel.MASK_USER_INPUT: return require_htmlDomUtils.isTextNode(node) ? isFormElement(node.parentNode) : isFormElement(node);
+		default: return false;
+	}
 }
 function shouldMaskAttribute(tagName, attributeName, attributeValue, nodePrivacyLevel, configuration) {
-    if (nodePrivacyLevel !== privacyConstants_1.NodePrivacyLevel.MASK && nodePrivacyLevel !== privacyConstants_1.NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED) {
-        return false;
-    }
-    if (attributeName === privacyConstants_1.PRIVACY_ATTR_NAME ||
-        getSelectorFromElement_1.STABLE_ATTRIBUTES.includes(attributeName) ||
-        attributeName === configuration.actionNameAttribute) {
-        return false;
-    }
-    switch (attributeName) {
-        case 'title':
-        case 'alt':
-        case 'placeholder':
-        case 'aria-label':
-        case 'name':
-            return true;
-    }
-    if (tagName === 'A' && attributeName === 'href') {
-        return true;
-    }
-    if (tagName === 'IFRAME' && attributeName === 'srcdoc') {
-        return true;
-    }
-    if (attributeValue && attributeName.startsWith('data-')) {
-        return true;
-    }
-    if ((tagName === 'IMG' || tagName === 'SOURCE') && (attributeName === 'src' || attributeName === 'srcset')) {
-        return true;
-    }
-    return false;
+	if (nodePrivacyLevel !== require_privacyConstants.NodePrivacyLevel.MASK && nodePrivacyLevel !== require_privacyConstants.NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED) return false;
+	if (attributeName === "data-kubesense-privacy" || require_getSelectorFromElement.STABLE_ATTRIBUTES.includes(attributeName) || attributeName === configuration.actionNameAttribute) return false;
+	switch (attributeName) {
+		case "title":
+		case "alt":
+		case "placeholder":
+		case "aria-label":
+		case "name": return true;
+	}
+	if (tagName === "A" && attributeName === "href") return true;
+	if (tagName === "IFRAME" && attributeName === "srcdoc") return true;
+	if (attributeValue && attributeName.startsWith("data-")) return true;
+	if ((tagName === "IMG" || tagName === "SOURCE") && (attributeName === "src" || attributeName === "srcset")) return true;
+	return false;
 }
 function isFormElement(node) {
-    if (!node || node.nodeType !== node.ELEMENT_NODE) {
-        return false;
-    }
-    const element = node;
-    if (element.tagName === 'INPUT') {
-        switch (element.type) {
-            case 'button':
-            case 'color':
-            case 'reset':
-            case 'submit':
-                return false;
-        }
-    }
-    return !!privacyConstants_1.FORM_PRIVATE_TAG_NAMES[element.tagName];
+	if (!node || node.nodeType !== node.ELEMENT_NODE) return false;
+	const element = node;
+	if (element.tagName === "INPUT") switch (element.type) {
+		case "button":
+		case "color":
+		case "reset":
+		case "submit": return false;
+	}
+	return !!require_privacyConstants.FORM_PRIVATE_TAG_NAMES[element.tagName];
 }
 /**
- * Text censoring non-destructively maintains whitespace characters in order to preserve text shape
- * during replay.
- */
-const censorText = (text) => text.replace(/\S/g, privacyConstants_1.TEXT_MASKING_CHAR);
+* Text censoring non-destructively maintains whitespace characters in order to preserve text shape
+* during replay.
+*/
+function censorText(text) {
+	return text.replace(/\S/g, "x");
+}
 function getTextContent(textNode, parentNodePrivacyLevel) {
-    var _a;
-    // The parent node may not be a html element which has a tagName attribute.
-    // So just let it be undefined which is ok in this use case.
-    const parentTagName = (_a = textNode.parentElement) === null || _a === void 0 ? void 0 : _a.tagName;
-    let textContent = textNode.textContent || '';
-    const shouldIgnoreWhiteSpace = parentTagName === 'HEAD';
-    if (shouldIgnoreWhiteSpace && !textContent.trim()) {
-        return;
-    }
-    const nodePrivacyLevel = parentNodePrivacyLevel;
-    const isScript = parentTagName === 'SCRIPT';
-    if (isScript) {
-        // For perf reasons, we don't record script (heuristic)
-        textContent = privacyConstants_1.CENSORED_STRING_MARK;
-    }
-    else if (nodePrivacyLevel === privacyConstants_1.NodePrivacyLevel.HIDDEN) {
-        // Should never occur, but just in case, we set to CENSORED_MARK.
-        textContent = privacyConstants_1.CENSORED_STRING_MARK;
-    }
-    else if (shouldMaskNode(textNode, nodePrivacyLevel)) {
-        if (
-        // Scrambling the child list breaks text nodes for DATALIST/SELECT/OPTGROUP
-        parentTagName === 'DATALIST' ||
-            parentTagName === 'SELECT' ||
-            parentTagName === 'OPTGROUP') {
-            if (!textContent.trim()) {
-                return;
-            }
-        }
-        else if (parentTagName === 'OPTION') {
-            // <Option> has low entropy in charset + text length, so use `CENSORED_STRING_MARK` when masked
-            textContent = privacyConstants_1.CENSORED_STRING_MARK;
-        }
-        else if (nodePrivacyLevel === privacyConstants_1.NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED) {
-            textContent = maskDisallowedTextContent(textContent);
-        }
-        else {
-            textContent = censorText(textContent);
-        }
-    }
-    return textContent;
+	const parentTagName = textNode.parentElement?.tagName;
+	let textContent = textNode.textContent || "";
+	const nodePrivacyLevel = parentNodePrivacyLevel;
+	if (parentTagName === "SCRIPT") textContent = "***";
+	else if (nodePrivacyLevel === require_privacyConstants.NodePrivacyLevel.HIDDEN) textContent = "***";
+	else if (shouldMaskNode(textNode, nodePrivacyLevel)) {
+		if (parentTagName === "DATALIST" || parentTagName === "SELECT" || parentTagName === "OPTGROUP") {} else if (parentTagName === "OPTION") textContent = "***";
+		else textContent = censorText(textContent);
+	}
+	if (parentTagName === "HEAD" && !textContent.trim()) return "";
+	return textContent;
 }
 /**
- * TODO: Preserve CSS element order, and record the presence of the tag, just don't render
- * We don't need this logic on the recorder side.
- * For security related meta's, customer can mask themmanually given they
- * are easy to identify in the HEAD tag.
- */
+* TODO: Preserve CSS element order, and record the presence of the tag, just don't render
+* We don't need this logic on the recorder side.
+* For security related meta's, customer can mask themmanually given they
+* are easy to identify in the HEAD tag.
+*/
 function shouldIgnoreElement(element) {
-    if (element.nodeName === 'SCRIPT') {
-        return true;
-    }
-    if (element.nodeName === 'LINK') {
-        const relAttribute = getLowerCaseAttribute('rel');
-        return (
-        // Link as script - Ignore only when rel=preload, modulepreload or prefetch
-        (/preload|prefetch/i.test(relAttribute) && getLowerCaseAttribute('as') === 'script') ||
-            // Favicons
-            relAttribute === 'shortcut icon' ||
-            relAttribute === 'icon');
-    }
-    if (element.nodeName === 'META') {
-        const nameAttribute = getLowerCaseAttribute('name');
-        const relAttribute = getLowerCaseAttribute('rel');
-        const propertyAttribute = getLowerCaseAttribute('property');
-        return (
-        // Favicons
-        /^msapplication-tile(image|color)$/.test(nameAttribute) ||
-            nameAttribute === 'application-name' ||
-            relAttribute === 'icon' ||
-            relAttribute === 'apple-touch-icon' ||
-            relAttribute === 'shortcut icon' ||
-            // Description
-            nameAttribute === 'keywords' ||
-            nameAttribute === 'description' ||
-            // Social
-            /^(og|twitter|fb):/.test(propertyAttribute) ||
-            /^(og|twitter):/.test(nameAttribute) ||
-            nameAttribute === 'pinterest' ||
-            // Robots
-            nameAttribute === 'robots' ||
-            nameAttribute === 'googlebot' ||
-            nameAttribute === 'bingbot' ||
-            // Http headers. Ex: X-UA-Compatible, Content-Type, Content-Language, cache-control,
-            // X-Translated-By
-            element.hasAttribute('http-equiv') ||
-            // Authorship
-            nameAttribute === 'author' ||
-            nameAttribute === 'generator' ||
-            nameAttribute === 'framework' ||
-            nameAttribute === 'publisher' ||
-            nameAttribute === 'progid' ||
-            /^article:/.test(propertyAttribute) ||
-            /^product:/.test(propertyAttribute) ||
-            // Verification
-            nameAttribute === 'google-site-verification' ||
-            nameAttribute === 'yandex-verification' ||
-            nameAttribute === 'csrf-token' ||
-            nameAttribute === 'p:domain_verify' ||
-            nameAttribute === 'verify-v1' ||
-            nameAttribute === 'verification' ||
-            nameAttribute === 'shopify-checkout-api-token');
-    }
-    function getLowerCaseAttribute(name) {
-        return (element.getAttribute(name) || '').toLowerCase();
-    }
-    return false;
+	if (element.nodeName === "SCRIPT") return true;
+	if (element.nodeName === "LINK") {
+		const relAttribute = getLowerCaseAttribute("rel");
+		return /preload|prefetch/i.test(relAttribute) && getLowerCaseAttribute("as") === "script" || relAttribute === "shortcut icon" || relAttribute === "icon";
+	}
+	if (element.nodeName === "META") {
+		const nameAttribute = getLowerCaseAttribute("name");
+		const relAttribute = getLowerCaseAttribute("rel");
+		const propertyAttribute = getLowerCaseAttribute("property");
+		return /^msapplication-tile(image|color)$/.test(nameAttribute) || nameAttribute === "application-name" || relAttribute === "icon" || relAttribute === "apple-touch-icon" || relAttribute === "shortcut icon" || nameAttribute === "keywords" || nameAttribute === "description" || /^(og|twitter|fb):/.test(propertyAttribute) || /^(og|twitter):/.test(nameAttribute) || nameAttribute === "pinterest" || nameAttribute === "robots" || nameAttribute === "googlebot" || nameAttribute === "bingbot" || element.hasAttribute("http-equiv") || nameAttribute === "author" || nameAttribute === "generator" || nameAttribute === "framework" || nameAttribute === "publisher" || nameAttribute === "progid" || /^article:/.test(propertyAttribute) || /^product:/.test(propertyAttribute) || nameAttribute === "google-site-verification" || nameAttribute === "yandex-verification" || nameAttribute === "csrf-token" || nameAttribute === "p:domain_verify" || nameAttribute === "verify-v1" || nameAttribute === "verification" || nameAttribute === "shopify-checkout-api-token";
+	}
+	function getLowerCaseAttribute(name) {
+		return (element.getAttribute(name) || "").toLowerCase();
+	}
+	return false;
 }
 function isAllowlisted(text) {
-    var _a;
-    if (!text || !text.trim()) {
-        return true;
-    }
-    // We are using toLocaleLowerCase when adding to the allowlist to avoid case sensitivity
-    // so we need to do the same here
-    return ((_a = window.$KUBESENSE_ALLOW) === null || _a === void 0 ? void 0 : _a.has(text.toLocaleLowerCase())) || false;
+	if (!text?.trim()) return true;
+	return window.$KUBESENSE_ALLOW?.has(text.toLocaleLowerCase()) || false;
 }
 function maskDisallowedTextContent(text, fixedMask) {
-    if (isAllowlisted(text)) {
-        return text;
-    }
-    return fixedMask || censorText(text);
+	if (isAllowlisted(text)) return text;
+	return fixedMask || censorText(text);
 }
+//#endregion
+exports.censorText = censorText;
+exports.getNodePrivacyLevel = getNodePrivacyLevel;
+exports.getNodeSelfPrivacyLevel = getNodeSelfPrivacyLevel;
+exports.getTextContent = getTextContent;
+exports.isAllowlisted = isAllowlisted;
+exports.maskDisallowedTextContent = maskDisallowedTextContent;
+exports.reducePrivacyLevel = reducePrivacyLevel;
+exports.shouldIgnoreElement = shouldIgnoreElement;
+exports.shouldMaskAttribute = shouldMaskAttribute;
+exports.shouldMaskNode = shouldMaskNode;
+
 //# sourceMappingURL=privacy.js.map

package/cjs/domain/privacy.js.map

@@ -1 +1 @@
-{"version":3,"file":"privacy.js","sourceRoot":"","sources":["../../src/domain/privacy.ts"],"names":[],"mappings":";;AAoBA,kDAkBC;AAKD,gDAqBC;AAKD,0DAmDC;AAaD,wCAoBC;AAED,kDAwCC;AAyBD,wCAyCC;AAQD,kDAiEC;AAMD,sCAOC;AAED,8DAKC;AAlWD,0DAAkF;AAClF,yDAO2B;AAC3B,qEAA4D;AAK5D;;;;;GAKG;AACH,SAAgB,mBAAmB,CACjC,IAAU,EACV,mBAAqC,EACrC,KAA6B;IAE7B,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAA;IACzB,CAAC;IACD,MAAM,UAAU,GAAG,IAAA,4BAAa,EAAC,IAAI,CAAC,CAAA;IACtC,MAAM,sBAAsB,GAAG,UAAU;QACvC,CAAC,CAAC,mBAAmB,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,CAAC;QAC7D,CAAC,CAAC,mBAAmB,CAAA;IACvB,MAAM,oBAAoB,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAA;IAC1D,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAA;IACzF,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;IACnC,CAAC;IACD,OAAO,gBAAgB,CAAA;AACzB,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAChC,iBAA+C,EAC/C,sBAAwC;IAExC,QAAQ,sBAAsB,EAAE,CAAC;QAC/B,oCAAoC;QACpC,KAAK,mCAAgB,CAAC,MAAM,CAAC;QAC7B,KAAK,mCAAgB,CAAC,MAAM;YAC1B,OAAO,sBAAsB,CAAA;IACjC,CAAC;IACD,QAAQ,iBAAiB,EAAE,CAAC;QAC1B,KAAK,mCAAgB,CAAC,KAAK,CAAC;QAC5B,KAAK,mCAAgB,CAAC,IAAI,CAAC;QAC3B,KAAK,mCAAgB,CAAC,eAAe,CAAC;QACtC,KAAK,mCAAgB,CAAC,uBAAuB,CAAC;QAC9C,KAAK,mCAAgB,CAAC,MAAM,CAAC;QAC7B,KAAK,mCAAgB,CAAC,MAAM;YAC1B,OAAO,iBAAiB,CAAA;QAC1B;YACE,OAAO,sBAAsB,CAAA;IACjC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,uBAAuB,CAAC,IAAU;IAChD,kDAAkD;IAClD,IAAI,CAAC,IAAA,4BAAa,EAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAM;IACR,CAAC;IAED,+BAA+B;IAC/B,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,mCAAgB,CAAC,KAAK,CAAA;IAC/B,CAAC;IAED,2CAA2C;IAC3C,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,YAAY,GAAG,IAAwB,CAAA;QAC7C,IAAI,YAAY,CAAC,IAAI,KAAK,UAAU,IAAI,YAAY,CAAC,IAAI,KAAK,OAAO,IAAI,YAAY,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACrG,OAAO,mCAAgB,CAAC,IAAI,CAAA;QAC9B,CAAC;QACD,IAAI,YAAY,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,mCAAgB,CAAC,IAAI,CAAA;QAC9B,CAAC;QACD,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;QAC9D,4GAA4G;QAC5G,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAC3F,OAAO,mCAAgB,CAAC,IAAI,CAAA;QAC9B,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,IAAI,IAAI,CAAC,OAAO,CAAC,IAAA,qCAAkB,EAAC,mCAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC9D,OAAO,mCAAgB,CAAC,MAAM,CAAA;IAChC,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,CAAC,IAAA,qCAAkB,EAAC,mCAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,mCAAgB,CAAC,IAAI,CAAA;IAC9B,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,CAAC,IAAA,qCAAkB,EAAC,mCAAgB,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC;QAC/E,OAAO,mCAAgB,CAAC,uBAAuB,CAAA;IACjD,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,CAAC,IAAA,qCAAkB,EAAC,mCAAgB,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,mCAAgB,CAAC,eAAe,CAAA;IACzC,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,CAAC,IAAA,qCAAkB,EAAC,mCAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,mCAAgB,CAAC,KAAK,CAAA;IAC/B,CAAC;IAED,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,mCAAgB,CAAC,MAAM,CAAA;IAChC,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,cAAc,CAAC,IAAU,EAAE,YAA8B;IACvE,QAAQ,YAAY,EAAE,CAAC;QACrB,KAAK,mCAAgB,CAAC,IAAI,CAAC;QAC3B,KAAK,mCAAgB,CAAC,MAAM,CAAC;QAC7B,KAAK,mCAAgB,CAAC,MAAM;YAC1B,OAAO,IAAI,CAAA;QACb,KAAK,mCAAgB,CAAC,uBAAuB;YAC3C,IAAI,IAAA,yBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,4EAA4E;gBAC5E,4DAA4D;gBAC5D,OAAO,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAA;YACvF,CAAC;YACD,oEAAoE;YACpE,mFAAmF;YACnF,OAAO,aAAa,CAAC,IAAI,CAAC,CAAA;QAC5B,KAAK,mCAAgB,CAAC,eAAe;YACnC,OAAO,IAAA,yBAAU,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QAChF;YACE,OAAO,KAAK,CAAA;IAChB,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB,CACjC,OAAe,EACf,aAAqB,EACrB,cAA6B,EAC7B,gBAAkC,EAClC,aAA+B;IAE/B,IAAI,gBAAgB,KAAK,mCAAgB,CAAC,IAAI,IAAI,gBAAgB,KAAK,mCAAgB,CAAC,uBAAuB,EAAE,CAAC;QAChH,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IACE,aAAa,KAAK,oCAAiB;QACnC,0CAAiB,CAAC,QAAQ,CAAC,aAAa,CAAC;QACzC,aAAa,KAAK,aAAa,CAAC,mBAAmB,EACnD,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,QAAQ,aAAa,EAAE,CAAC;QACtB,KAAK,OAAO,CAAC;QACb,KAAK,KAAK,CAAC;QACX,KAAK,aAAa,CAAC;QACnB,KAAK,YAAY,CAAC;QAClB,KAAK,MAAM;YACT,OAAO,IAAI,CAAA;IACf,CAAC;IACD,IAAI,OAAO,KAAK,GAAG,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;QAChD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;QACvD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,cAAc,IAAI,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,QAAQ,CAAC,IAAI,CAAC,aAAa,KAAK,KAAK,IAAI,aAAa,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC3G,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,aAAa,CAAC,IAAiB;IACtC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QACjD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,OAAO,GAAG,IAAwB,CAAA;IACxC,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAChC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,KAAK,QAAQ,CAAC;YACd,KAAK,OAAO,CAAC;YACb,KAAK,OAAO,CAAC;YACb,KAAK,QAAQ;gBACX,OAAO,KAAK,CAAA;QAChB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC,yCAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,oCAAiB,CAAC,CAAA;AAE3E,SAAgB,cAAc,CAAC,QAAc,EAAE,sBAAwC;;IACrF,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,aAAa,GAAG,MAAA,QAAQ,CAAC,aAAa,0CAAE,OAAO,CAAA;IACrD,IAAI,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAA;IAE5C,MAAM,sBAAsB,GAAG,aAAa,KAAK,MAAM,CAAA;IACvD,IAAI,sBAAsB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,OAAM;IACR,CAAC;IAED,MAAM,gBAAgB,GAAG,sBAAsB,CAAA;IAE/C,MAAM,QAAQ,GAAG,aAAa,KAAK,QAAQ,CAAA;IAE3C,IAAI,QAAQ,EAAE,CAAC;QACb,uDAAuD;QACvD,WAAW,GAAG,uCAAoB,CAAA;IACpC,CAAC;SAAM,IAAI,gBAAgB,KAAK,mCAAgB,CAAC,MAAM,EAAE,CAAC;QACxD,iEAAiE;QACjE,WAAW,GAAG,uCAAoB,CAAA;IACpC,CAAC;SAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACtD;QACE,2EAA2E;QAC3E,aAAa,KAAK,UAAU;YAC5B,aAAa,KAAK,QAAQ;YAC1B,aAAa,KAAK,UAAU,EAC5B,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;gBACxB,OAAM;YACR,CAAC;QACH,CAAC;aAAM,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;YACtC,+FAA+F;YAC/F,WAAW,GAAG,uCAAoB,CAAA;QACpC,CAAC;aAAM,IAAI,gBAAgB,KAAK,mCAAgB,CAAC,uBAAuB,EAAE,CAAC;YACzE,WAAW,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAA;QACtD,CAAC;aAAM,CAAC;YACN,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;QACvC,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAA;AACpB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAC,OAAgB;IAClD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;QACjD,OAAO;QACL,2EAA2E;QAC3E,CAAC,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC;YACpF,WAAW;YACX,YAAY,KAAK,eAAe;YAChC,YAAY,KAAK,MAAM,CACxB,CAAA;IACH,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAChC,MAAM,aAAa,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;QACnD,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;QACjD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAA;QAC3D,OAAO;QACL,WAAW;QACX,mCAAmC,CAAC,IAAI,CAAC,aAAa,CAAC;YACvD,aAAa,KAAK,kBAAkB;YACpC,YAAY,KAAK,MAAM;YACvB,YAAY,KAAK,kBAAkB;YACnC,YAAY,KAAK,eAAe;YAChC,cAAc;YACd,aAAa,KAAK,UAAU;YAC5B,aAAa,KAAK,aAAa;YAC/B,SAAS;YACT,mBAAmB,CAAC,IAAI,CAAC,iBAAiB,CAAC;YAC3C,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC;YACpC,aAAa,KAAK,WAAW;YAC7B,SAAS;YACT,aAAa,KAAK,QAAQ;YAC1B,aAAa,KAAK,WAAW;YAC7B,aAAa,KAAK,SAAS;YAC3B,oFAAoF;YACpF,kBAAkB;YAClB,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC;YAClC,aAAa;YACb,aAAa,KAAK,QAAQ;YAC1B,aAAa,KAAK,WAAW;YAC7B,aAAa,KAAK,WAAW;YAC7B,aAAa,KAAK,WAAW;YAC7B,aAAa,KAAK,QAAQ;YAC1B,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC;YACnC,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC;YACnC,eAAe;YACf,aAAa,KAAK,0BAA0B;YAC5C,aAAa,KAAK,qBAAqB;YACvC,aAAa,KAAK,YAAY;YAC9B,aAAa,KAAK,iBAAiB;YACnC,aAAa,KAAK,WAAW;YAC7B,aAAa,KAAK,cAAc;YAChC,aAAa,KAAK,4BAA4B,CAC/C,CAAA;IACH,CAAC;IAED,SAAS,qBAAqB,CAAC,IAAY;QACzC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IACzD,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAMD,SAAgB,aAAa,CAAC,IAAY;;IACxC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAA;IACb,CAAC;IACD,wFAAwF;IACxF,iCAAiC;IACjC,OAAO,CAAA,MAAC,MAAwB,CAAC,gBAAgB,0CAAE,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,KAAI,KAAK,CAAA;AAC3F,CAAC;AAED,SAAgB,yBAAyB,CAAC,IAAY,EAAE,SAAkB;IACxE,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,CAAA;AACtC,CAAC"}
+{"version":3,"file":"privacy.js","names":["getParentNode","NodePrivacyLevel","isElementNode","getPrivacySelector","isTextNode","STABLE_ATTRIBUTES","FORM_PRIVATE_TAG_NAMES"],"sources":["../../src/domain/privacy.ts"],"sourcesContent":["import { isElementNode, getParentNode, isTextNode } from '../browser/htmlDomUtils'\nimport {\n  NodePrivacyLevel,\n  FORM_PRIVATE_TAG_NAMES,\n  CENSORED_STRING_MARK,\n  getPrivacySelector,\n  TEXT_MASKING_CHAR,\n  PRIVACY_ATTR_NAME,\n} from './privacyConstants'\nimport { STABLE_ATTRIBUTES } from './getSelectorFromElement'\nimport type { RumConfiguration } from './configuration'\n\nexport type NodePrivacyLevelCache = Map<Node, NodePrivacyLevel>\n\n/**\n * Get node privacy level by iterating over its ancestors. When the direct parent privacy level is\n * know, it is best to use something like:\n *\n * derivePrivacyLevelGivenParent(getNodeSelfPrivacyLevel(node), parentNodePrivacyLevel)\n */\nexport function getNodePrivacyLevel(\n  node: Node,\n  defaultPrivacyLevel: NodePrivacyLevel,\n  cache?: NodePrivacyLevelCache\n): NodePrivacyLevel {\n  if (cache?.has(node)) {\n    return cache.get(node)!\n  }\n  const parentNode = getParentNode(node)\n  const parentNodePrivacyLevel = parentNode\n    ? getNodePrivacyLevel(parentNode, defaultPrivacyLevel, cache)\n    : defaultPrivacyLevel\n  const selfNodePrivacyLevel = getNodeSelfPrivacyLevel(node)\n  const nodePrivacyLevel = reducePrivacyLevel(selfNodePrivacyLevel, parentNodePrivacyLevel)\n  if (cache) {\n    cache.set(node, nodePrivacyLevel)\n  }\n  return nodePrivacyLevel\n}\n\n/**\n * Reduces the next privacy level based on self + parent privacy levels\n */\nexport function reducePrivacyLevel(\n  childPrivacyLevel: NodePrivacyLevel | undefined,\n  parentNodePrivacyLevel: NodePrivacyLevel\n): NodePrivacyLevel {\n  switch (parentNodePrivacyLevel) {\n    // These values cannot be overridden\n    case NodePrivacyLevel.HIDDEN:\n    case NodePrivacyLevel.IGNORE:\n      return parentNodePrivacyLevel\n  }\n  switch (childPrivacyLevel) {\n    case NodePrivacyLevel.ALLOW:\n    case NodePrivacyLevel.MASK:\n    case NodePrivacyLevel.MASK_USER_INPUT:\n    case NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED:\n    case NodePrivacyLevel.HIDDEN:\n    case NodePrivacyLevel.IGNORE:\n      return childPrivacyLevel\n    default:\n      return parentNodePrivacyLevel\n  }\n}\n\n/**\n * Determines the node's own privacy level without checking for ancestors.\n */\nexport function getNodeSelfPrivacyLevel(node: Node): NodePrivacyLevel | undefined {\n  // Only Element types can have a privacy level set\n  if (!isElementNode(node)) {\n    return\n  }\n\n  // Overrules for replay purpose\n  if (node.tagName === 'BASE') {\n    return NodePrivacyLevel.ALLOW\n  }\n\n  // Overrules to enforce end-user protection\n  if (node.tagName === 'INPUT') {\n    const inputElement = node as HTMLInputElement\n    if (inputElement.type === 'password' || inputElement.type === 'email' || inputElement.type === 'tel') {\n      return NodePrivacyLevel.MASK\n    }\n    if (inputElement.type === 'hidden') {\n      return NodePrivacyLevel.MASK\n    }\n    const autocomplete = inputElement.getAttribute('autocomplete')\n    // Handle input[autocomplete=cc-number/cc-csc/cc-exp/cc-exp-month/cc-exp-year/new-password/current-password]\n    if (autocomplete && (autocomplete.startsWith('cc-') || autocomplete.endsWith('-password'))) {\n      return NodePrivacyLevel.MASK\n    }\n  }\n\n  // Check HTML privacy attributes and classes\n  if (node.matches(getPrivacySelector(NodePrivacyLevel.HIDDEN))) {\n    return NodePrivacyLevel.HIDDEN\n  }\n\n  if (node.matches(getPrivacySelector(NodePrivacyLevel.MASK))) {\n    return NodePrivacyLevel.MASK\n  }\n\n  if (node.matches(getPrivacySelector(NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED))) {\n    return NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED\n  }\n\n  if (node.matches(getPrivacySelector(NodePrivacyLevel.MASK_USER_INPUT))) {\n    return NodePrivacyLevel.MASK_USER_INPUT\n  }\n\n  if (node.matches(getPrivacySelector(NodePrivacyLevel.ALLOW))) {\n    return NodePrivacyLevel.ALLOW\n  }\n\n  if (shouldIgnoreElement(node)) {\n    return NodePrivacyLevel.IGNORE\n  }\n}\n\n/**\n * Helper aiming to unify `mask` and `mask-user-input` privacy levels:\n *\n * In the `mask` case, it is trivial: we should mask the element.\n *\n * In the `mask-user-input` case, we should mask the element only if it is a \"form\" element or the\n * direct parent is a form element for text nodes).\n *\n * Other `shouldMaskNode` cases are edge cases that should not matter too much (ex: should we mask a\n * node if it is ignored or hidden? it doesn't matter since it won't be serialized).\n */\nexport function shouldMaskNode(node: Node, privacyLevel: NodePrivacyLevel) {\n  switch (privacyLevel) {\n    case NodePrivacyLevel.MASK:\n    case NodePrivacyLevel.HIDDEN:\n    case NodePrivacyLevel.IGNORE:\n      return true\n    case NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED:\n      if (isTextNode(node)) {\n        // Always return true if our parent is a form element, like MASK_USER_INPUT.\n        // Otherwise, decide whether to mask based on the allowlist.\n        return isFormElement(node.parentNode) ? true : !isAllowlisted(node.textContent || '')\n      }\n      // Always return true if we're a form element, like MASK_USER_INPUT.\n      // Otherwise, return false; MASK_UNLESS_ALLOWLISTED only directly masks text nodes.\n      return isFormElement(node)\n    case NodePrivacyLevel.MASK_USER_INPUT:\n      return isTextNode(node) ? isFormElement(node.parentNode) : isFormElement(node)\n    default:\n      return false\n  }\n}\n\nexport function shouldMaskAttribute(\n  tagName: string,\n  attributeName: string,\n  attributeValue: string | null,\n  nodePrivacyLevel: NodePrivacyLevel,\n  configuration: RumConfiguration\n) {\n  if (nodePrivacyLevel !== NodePrivacyLevel.MASK && nodePrivacyLevel !== NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED) {\n    return false\n  }\n  if (\n    attributeName === PRIVACY_ATTR_NAME ||\n    STABLE_ATTRIBUTES.includes(attributeName) ||\n    attributeName === configuration.actionNameAttribute\n  ) {\n    return false\n  }\n\n  switch (attributeName) {\n    case 'title':\n    case 'alt':\n    case 'placeholder':\n    case 'aria-label':\n    case 'name':\n      return true\n  }\n  if (tagName === 'A' && attributeName === 'href') {\n    return true\n  }\n  if (tagName === 'IFRAME' && attributeName === 'srcdoc') {\n    return true\n  }\n  if (attributeValue && attributeName.startsWith('data-')) {\n    return true\n  }\n  if ((tagName === 'IMG' || tagName === 'SOURCE') && (attributeName === 'src' || attributeName === 'srcset')) {\n    return true\n  }\n\n  return false\n}\n\nfunction isFormElement(node: Node | null): boolean {\n  if (!node || node.nodeType !== node.ELEMENT_NODE) {\n    return false\n  }\n  const element = node as HTMLInputElement\n  if (element.tagName === 'INPUT') {\n    switch (element.type) {\n      case 'button':\n      case 'color':\n      case 'reset':\n      case 'submit':\n        return false\n    }\n  }\n  return !!FORM_PRIVATE_TAG_NAMES[element.tagName]\n}\n\n/**\n * Text censoring non-destructively maintains whitespace characters in order to preserve text shape\n * during replay.\n */\nexport function censorText(text: string): string {\n  return text.replace(/\\S/g, TEXT_MASKING_CHAR)\n}\n\nexport function getTextContent(textNode: Node, parentNodePrivacyLevel: NodePrivacyLevel): string {\n  // The parent node may not be a html element which has a tagName attribute.\n  // So just let it be undefined which is ok in this use case.\n  const parentTagName = textNode.parentElement?.tagName\n  let textContent = textNode.textContent || ''\n  const nodePrivacyLevel = parentNodePrivacyLevel\n\n  if (parentTagName === 'SCRIPT') {\n    // For perf reasons, we don't record script (heuristic)\n    textContent = CENSORED_STRING_MARK\n  } else if (nodePrivacyLevel === NodePrivacyLevel.HIDDEN) {\n    // Should never occur, but just in case, we set to CENSORED_MARK.\n    textContent = CENSORED_STRING_MARK\n  } else if (shouldMaskNode(textNode, nodePrivacyLevel)) {\n    if (parentTagName === 'DATALIST' || parentTagName === 'SELECT' || parentTagName === 'OPTGROUP') {\n      // Masking the child list breaks text nodes for DATALIST/SELECT/OPTGROUP.\n      // TODO: Reinvestigate this.\n    } else if (parentTagName === 'OPTION') {\n      // <Option> has low entropy in charset + text length, so use `CENSORED_STRING_MARK` when masked\n      textContent = CENSORED_STRING_MARK\n    } else {\n      textContent = censorText(textContent)\n    }\n  }\n\n  const shouldCollapseWhiteSpace = parentTagName === 'HEAD'\n  if (shouldCollapseWhiteSpace && !textContent.trim()) {\n    return ''\n  }\n\n  return textContent\n}\n\n/**\n * TODO: Preserve CSS element order, and record the presence of the tag, just don't render\n * We don't need this logic on the recorder side.\n * For security related meta's, customer can mask themmanually given they\n * are easy to identify in the HEAD tag.\n */\nexport function shouldIgnoreElement(element: Element): boolean {\n  if (element.nodeName === 'SCRIPT') {\n    return true\n  }\n\n  if (element.nodeName === 'LINK') {\n    const relAttribute = getLowerCaseAttribute('rel')\n    return (\n      // Link as script - Ignore only when rel=preload, modulepreload or prefetch\n      (/preload|prefetch/i.test(relAttribute) && getLowerCaseAttribute('as') === 'script') ||\n      // Favicons\n      relAttribute === 'shortcut icon' ||\n      relAttribute === 'icon'\n    )\n  }\n\n  if (element.nodeName === 'META') {\n    const nameAttribute = getLowerCaseAttribute('name')\n    const relAttribute = getLowerCaseAttribute('rel')\n    const propertyAttribute = getLowerCaseAttribute('property')\n    return (\n      // Favicons\n      /^msapplication-tile(image|color)$/.test(nameAttribute) ||\n      nameAttribute === 'application-name' ||\n      relAttribute === 'icon' ||\n      relAttribute === 'apple-touch-icon' ||\n      relAttribute === 'shortcut icon' ||\n      // Description\n      nameAttribute === 'keywords' ||\n      nameAttribute === 'description' ||\n      // Social\n      /^(og|twitter|fb):/.test(propertyAttribute) ||\n      /^(og|twitter):/.test(nameAttribute) ||\n      nameAttribute === 'pinterest' ||\n      // Robots\n      nameAttribute === 'robots' ||\n      nameAttribute === 'googlebot' ||\n      nameAttribute === 'bingbot' ||\n      // Http headers. Ex: X-UA-Compatible, Content-Type, Content-Language, cache-control,\n      // X-Translated-By\n      element.hasAttribute('http-equiv') ||\n      // Authorship\n      nameAttribute === 'author' ||\n      nameAttribute === 'generator' ||\n      nameAttribute === 'framework' ||\n      nameAttribute === 'publisher' ||\n      nameAttribute === 'progid' ||\n      /^article:/.test(propertyAttribute) ||\n      /^product:/.test(propertyAttribute) ||\n      // Verification\n      nameAttribute === 'google-site-verification' ||\n      nameAttribute === 'yandex-verification' ||\n      nameAttribute === 'csrf-token' ||\n      nameAttribute === 'p:domain_verify' ||\n      nameAttribute === 'verify-v1' ||\n      nameAttribute === 'verification' ||\n      nameAttribute === 'shopify-checkout-api-token'\n    )\n  }\n\n  function getLowerCaseAttribute(name: string) {\n    return (element.getAttribute(name) || '').toLowerCase()\n  }\n\n  return false\n}\n\nexport interface BrowserWindow extends Window {\n  $KUBESENSE_ALLOW?: Set<string>\n}\n\nexport function isAllowlisted(text: string): boolean {\n  if (!text?.trim()) {\n    return true\n  }\n  // We are using toLocaleLowerCase when adding to the allowlist to avoid case sensitivity\n  // so we need to do the same here\n  return (window as BrowserWindow).$KUBESENSE_ALLOW?.has(text.toLocaleLowerCase()) || false\n}\n\nexport function maskDisallowedTextContent(text: string, fixedMask?: string): string {\n  if (isAllowlisted(text)) {\n    return text\n  }\n  return fixedMask || censorText(text)\n}\n"],"mappings":";;;;;;;;;;AAoBA,SAAgB,oBACd,MACA,qBACA,OACkB;CAClB,IAAI,OAAO,IAAI,IAAI,GACjB,OAAO,MAAM,IAAI,IAAI;CAEvB,MAAM,aAAaA,qBAAAA,cAAc,IAAI;CACrC,MAAM,yBAAyB,aAC3B,oBAAoB,YAAY,qBAAqB,KAAK,IAC1D;CAEJ,MAAM,mBAAmB,mBADI,wBAAwB,IACU,GAAG,sBAAsB;CACxF,IAAI,OACF,MAAM,IAAI,MAAM,gBAAgB;CAElC,OAAO;AACT;;;;AAKA,SAAgB,mBACd,mBACA,wBACkB;CAClB,QAAQ,wBAAR;EAEE,KAAKC,yBAAAA,iBAAiB;EACtB,KAAKA,yBAAAA,iBAAiB,QACpB,OAAO;CACX;CACA,QAAQ,mBAAR;EACE,KAAKA,yBAAAA,iBAAiB;EACtB,KAAKA,yBAAAA,iBAAiB;EACtB,KAAKA,yBAAAA,iBAAiB;EACtB,KAAKA,yBAAAA,iBAAiB;EACtB,KAAKA,yBAAAA,iBAAiB;EACtB,KAAKA,yBAAAA,iBAAiB,QACpB,OAAO;EACT,SACE,OAAO;CACX;AACF;;;;AAKA,SAAgB,wBAAwB,MAA0C;CAEhF,IAAI,CAACC,qBAAAA,cAAc,IAAI,GACrB;CAIF,IAAI,KAAK,YAAY,QACnB,OAAOD,yBAAAA,iBAAiB;CAI1B,IAAI,KAAK,YAAY,SAAS;EAC5B,MAAM,eAAe;EACrB,IAAI,aAAa,SAAS,cAAc,aAAa,SAAS,WAAW,aAAa,SAAS,OAC7F,OAAOA,yBAAAA,iBAAiB;EAE1B,IAAI,aAAa,SAAS,UACxB,OAAOA,yBAAAA,iBAAiB;EAE1B,MAAM,eAAe,aAAa,aAAa,cAAc;EAE7D,IAAI,iBAAiB,aAAa,WAAW,KAAK,KAAK,aAAa,SAAS,WAAW,IACtF,OAAOA,yBAAAA,iBAAiB;CAE5B;CAGA,IAAI,KAAK,QAAQE,yBAAAA,mBAAmBF,yBAAAA,iBAAiB,MAAM,CAAC,GAC1D,OAAOA,yBAAAA,iBAAiB;CAG1B,IAAI,KAAK,QAAQE,yBAAAA,mBAAmBF,yBAAAA,iBAAiB,IAAI,CAAC,GACxD,OAAOA,yBAAAA,iBAAiB;CAG1B,IAAI,KAAK,QAAQE,yBAAAA,mBAAmBF,yBAAAA,iBAAiB,uBAAuB,CAAC,GAC3E,OAAOA,yBAAAA,iBAAiB;CAG1B,IAAI,KAAK,QAAQE,yBAAAA,mBAAmBF,yBAAAA,iBAAiB,eAAe,CAAC,GACnE,OAAOA,yBAAAA,iBAAiB;CAG1B,IAAI,KAAK,QAAQE,yBAAAA,mBAAmBF,yBAAAA,iBAAiB,KAAK,CAAC,GACzD,OAAOA,yBAAAA,iBAAiB;CAG1B,IAAI,oBAAoB,IAAI,GAC1B,OAAOA,yBAAAA,iBAAiB;AAE5B;;;;;;;;;;;;AAaA,SAAgB,eAAe,MAAY,cAAgC;CACzE,QAAQ,cAAR;EACE,KAAKA,yBAAAA,iBAAiB;EACtB,KAAKA,yBAAAA,iBAAiB;EACtB,KAAKA,yBAAAA,iBAAiB,QACpB,OAAO;EACT,KAAKA,yBAAAA,iBAAiB;GACpB,IAAIG,qBAAAA,WAAW,IAAI,GAGjB,OAAO,cAAc,KAAK,UAAU,IAAI,OAAO,CAAC,cAAc,KAAK,eAAe,EAAE;GAItF,OAAO,cAAc,IAAI;EAC3B,KAAKH,yBAAAA,iBAAiB,iBACpB,OAAOG,qBAAAA,WAAW,IAAI,IAAI,cAAc,KAAK,UAAU,IAAI,cAAc,IAAI;EAC/E,SACE,OAAO;CACX;AACF;AAEA,SAAgB,oBACd,SACA,eACA,gBACA,kBACA,eACA;CACA,IAAI,qBAAqBH,yBAAAA,iBAAiB,QAAQ,qBAAqBA,yBAAAA,iBAAiB,yBACtF,OAAO;CAET,IACE,kBAAA,4BACAI,+BAAAA,kBAAkB,SAAS,aAAa,KACxC,kBAAkB,cAAc,qBAEhC,OAAO;CAGT,QAAQ,eAAR;EACE,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,QACH,OAAO;CACX;CACA,IAAI,YAAY,OAAO,kBAAkB,QACvC,OAAO;CAET,IAAI,YAAY,YAAY,kBAAkB,UAC5C,OAAO;CAET,IAAI,kBAAkB,cAAc,WAAW,OAAO,GACpD,OAAO;CAET,KAAK,YAAY,SAAS,YAAY,cAAc,kBAAkB,SAAS,kBAAkB,WAC/F,OAAO;CAGT,OAAO;AACT;AAEA,SAAS,cAAc,MAA4B;CACjD,IAAI,CAAC,QAAQ,KAAK,aAAa,KAAK,cAClC,OAAO;CAET,MAAM,UAAU;CAChB,IAAI,QAAQ,YAAY,SACtB,QAAQ,QAAQ,MAAhB;EACE,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,UACH,OAAO;CACX;CAEF,OAAO,CAAC,CAACC,yBAAAA,uBAAuB,QAAQ;AAC1C;;;;;AAMA,SAAgB,WAAW,MAAsB;CAC/C,OAAO,KAAK,QAAQ,OAAA,GAAwB;AAC9C;AAEA,SAAgB,eAAe,UAAgB,wBAAkD;CAG/F,MAAM,gBAAgB,SAAS,eAAe;CAC9C,IAAI,cAAc,SAAS,eAAe;CAC1C,MAAM,mBAAmB;CAEzB,IAAI,kBAAkB,UAEpB,cAAA;MACK,IAAI,qBAAqBL,yBAAAA,iBAAiB,QAE/C,cAAA;MACK,IAAI,eAAe,UAAU,gBAAgB,GAAG;EACrD,IAAI,kBAAkB,cAAc,kBAAkB,YAAY,kBAAkB,YAAY,CAGhG,OAAO,IAAI,kBAAkB,UAE3B,cAAA;OAEA,cAAc,WAAW,WAAW;CAExC;CAGA,IADiC,kBAAkB,UACnB,CAAC,YAAY,KAAK,GAChD,OAAO;CAGT,OAAO;AACT;;;;;;;AAQA,SAAgB,oBAAoB,SAA2B;CAC7D,IAAI,QAAQ,aAAa,UACvB,OAAO;CAGT,IAAI,QAAQ,aAAa,QAAQ;EAC/B,MAAM,eAAe,sBAAsB,KAAK;EAChD,OAEG,oBAAoB,KAAK,YAAY,KAAK,sBAAsB,IAAI,MAAM,YAE3E,iBAAiB,mBACjB,iBAAiB;CAErB;CAEA,IAAI,QAAQ,aAAa,QAAQ;EAC/B,MAAM,gBAAgB,sBAAsB,MAAM;EAClD,MAAM,eAAe,sBAAsB,KAAK;EAChD,MAAM,oBAAoB,sBAAsB,UAAU;EAC1D,OAEE,oCAAoC,KAAK,aAAa,KACtD,kBAAkB,sBAClB,iBAAiB,UACjB,iBAAiB,sBACjB,iBAAiB,mBAEjB,kBAAkB,cAClB,kBAAkB,iBAElB,oBAAoB,KAAK,iBAAiB,KAC1C,iBAAiB,KAAK,aAAa,KACnC,kBAAkB,eAElB,kBAAkB,YAClB,kBAAkB,eAClB,kBAAkB,aAGlB,QAAQ,aAAa,YAAY,KAEjC,kBAAkB,YAClB,kBAAkB,eAClB,kBAAkB,eAClB,kBAAkB,eAClB,kBAAkB,YAClB,YAAY,KAAK,iBAAiB,KAClC,YAAY,KAAK,iBAAiB,KAElC,kBAAkB,8BAClB,kBAAkB,yBAClB,kBAAkB,gBAClB,kBAAkB,qBAClB,kBAAkB,eAClB,kBAAkB,kBAClB,kBAAkB;CAEtB;CAEA,SAAS,sBAAsB,MAAc;EAC3C,QAAQ,QAAQ,aAAa,IAAI,KAAK,GAAA,CAAI,YAAY;CACxD;CAEA,OAAO;AACT;AAMA,SAAgB,cAAc,MAAuB;CACnD,IAAI,CAAC,MAAM,KAAK,GACd,OAAO;CAIT,OAAQ,OAAyB,kBAAkB,IAAI,KAAK,kBAAkB,CAAC,KAAK;AACtF;AAEA,SAAgB,0BAA0B,MAAc,WAA4B;CAClF,IAAI,cAAc,IAAI,GACpB,OAAO;CAET,OAAO,aAAa,WAAW,IAAI;AACrC"}