@microsoft/applicationinsights-analytics-js 3.3.10-nightly3.2507-07 → 3.3.10-nightly3.2507-17

package/dist/es5/applicationinsights-analytics-js.js

@@ -1,5 +1,5 @@
 /*!
- * Application Insights JavaScript SDK - Web Analytics, 3.3.10-nightly3.2507-07
+ * Application Insights JavaScript SDK - Web Analytics, 3.3.10-nightly3.2507-17
  * Copyright (c) Microsoft and contributors. All rights reserved.
  */
 (function (global, factory) {
@@ -1200,6 +1200,8 @@
     var _DYN_USER_AGENT = "userAgent";
     var _DYN_SPLIT$1 = "split";
     var _DYN_REPLACE = "replace";
+    var _DYN_SUBSTRING = "substring";
+    var _DYN_INDEX_OF = "indexOf";
     var _DYN_TYPE = "type";
     var _DYN_EVT_NAME = "evtName";
     var _DYN_IS_CHILD_EVT = "isChildEvt";
@@ -1234,6 +1236,8 @@
     var STR_DOMAIN = "domain";
     var STR_PATH = "path";
     var STR_NOT_DYNAMIC_ERROR = "Not dynamic - ";
+    var STR_REDACTED = "REDACTED";
+    var DEFAULT_SENSITIVE_PARAMS = ["sig", "Signature", "AWSAccessKeyId", "X-Goog-Signature"];
 
     var strGetPrototypeOf = "getPrototypeOf";
     var rCamelCase = /-([a-z])/g;
@@ -1361,6 +1365,110 @@
         }
         return _isTrident;
     }
+    function redactUserInfo(url) {
+        return url.replace(/^([a-zA-Z][a-zA-Z0-9+.-]*:\/\/)([^:@]{1,200}):([^@]{1,200})@(.*)$/, "$1REDACTED:REDACTED@$4");
+    }
+    function redactQueryParameters(url, config) {
+        var sensitiveParams;
+        var questionMarkIndex = strIndexOf(url, "?");
+        if (questionMarkIndex === -1) {
+            return url;
+        }
+        if (config && config.redactQueryParams) {
+            sensitiveParams = DEFAULT_SENSITIVE_PARAMS.concat(config.redactQueryParams);
+        }
+        else {
+            sensitiveParams = DEFAULT_SENSITIVE_PARAMS;
+        }
+        var baseUrl = strSubstring(url, 0, questionMarkIndex + 1);
+        var queryString = strSubstring(url, questionMarkIndex + 1);
+        var fragment = STR_EMPTY;
+        var hashIndex = strIndexOf(queryString, "#");
+        if (hashIndex !== -1) {
+            fragment = strSubstring(queryString, hashIndex);
+            queryString = strSubstring(queryString, 0, hashIndex);
+        }
+        var hasPotentialSensitiveParam = false;
+        for (var i = 0; i < sensitiveParams[_DYN_LENGTH$2 ]; i++) {
+            var paramCheck = sensitiveParams[i] + "=";
+            if (strIndexOf(queryString, paramCheck) !== -1) {
+                hasPotentialSensitiveParam = true;
+                break;
+            }
+        }
+        if (!hasPotentialSensitiveParam) {
+            return url;
+        }
+        var resultParts = [];
+        var anyParamRedacted = false;
+        if (queryString && queryString[_DYN_LENGTH$2 ]) {
+            var pairs = queryString[_DYN_SPLIT$1 ]("&");
+            for (var i = 0; i < pairs[_DYN_LENGTH$2 ]; i++) {
+                var pair = pairs[i];
+                if (!pair) {
+                    continue;
+                }
+                var equalsIndex = strIndexOf(pair, "=");
+                if (equalsIndex === -1) {
+                    resultParts[_DYN_PUSH ](pair);
+                }
+                else {
+                    var paramName = pair[_DYN_SUBSTRING ](0, equalsIndex);
+                    var paramValue = pair[_DYN_SUBSTRING ](equalsIndex + 1);
+                    if (paramValue === STR_EMPTY) {
+                        resultParts[_DYN_PUSH ](pair);
+                    }
+                    else {
+                        var shouldRedact = false;
+                        for (var j = 0; j < sensitiveParams[_DYN_LENGTH$2 ]; j++) {
+                            if (paramName === sensitiveParams[j]) {
+                                shouldRedact = true;
+                                anyParamRedacted = true;
+                                break;
+                            }
+                        }
+                        if (shouldRedact) {
+                            resultParts[_DYN_PUSH ](paramName + "=" + STR_REDACTED);
+                        }
+                        else {
+                            resultParts[_DYN_PUSH ](pair);
+                        }
+                    }
+                }
+            }
+        }
+        if (!anyParamRedacted) {
+            return url;
+        }
+        return baseUrl + resultParts.join("&") + fragment;
+    }
+    function fieldRedaction(input, config) {
+        if (!input || input[_DYN_INDEX_OF ](" ") !== -1) {
+            return input;
+        }
+        var isRedactionDisabled = config && config.redactUrls === false;
+        if (isRedactionDisabled) {
+            return input;
+        }
+        var hasCredentials = strIndexOf(input, "@") !== -1;
+        var hasQueryParams = strIndexOf(input, "?") !== -1;
+        if (!hasCredentials && !hasQueryParams) {
+            return input;
+        }
+        try {
+            var result = input;
+            if (hasCredentials) {
+                result = redactUserInfo(input);
+            }
+            if (hasQueryParams) {
+                result = redactQueryParameters(result, config);
+            }
+            return result;
+        }
+        catch (e) {
+            return input;
+        }
+    }
 
     var UInt32Mask = 0x100000000;
     var MaxUInt32 = 0xffffffff;
@@ -1432,7 +1540,7 @@
         return result;
     }
 
-    var version = '3.3.10-nightly3.2507-07';
+    var version = '3.3.10-nightly3.2507-17';
     var instanceName = "." + newId(6);
     var _dataUid = 0;
     function _canAcceptData(target) {
@@ -3738,7 +3846,10 @@
         }
         return valueTrunc || value;
     }
-    function dataSanitizeUrl(logger, url) {
+    function dataSanitizeUrl(logger, url, config) {
+        if (isString(url)) {
+            url = fieldRedaction(url, config);
+        }
         return dataSanitizeInput(logger, url, 2048 , 66 );
     }
     function dataSanitizeMessage(logger, message) {
@@ -3939,10 +4050,10 @@
         };
     }
 
-    var StorageType = createEnumStyle({
+    var StorageType = ( /* @__PURE__ */createEnumStyle({
         LocalStorage: 0 ,
         SessionStorage: 1
-    });
+    }));
 
     var _canUseLocalStorage = undefined;
     var _canUseSessionStorage = undefined;
@@ -4887,8 +4998,10 @@
     var _DYN_DIAG_LOG = "diagLog";
     var _DYN_TRACK = "track";
     var _DYN_TRACK_PAGE_VIEW = "trackPageView";
+    var _DYN_CONFIG = "config";
     var _DYN_TRACK_PREVIOUS_PAGE_1 = "trackPreviousPageVisit";
     var _DYN_SEND_PAGE_VIEW_INTER2 = "sendPageViewInternal";
+    var _DYN_REF_URI = "refUri";
     var _DYN_START_TIME = "startTime";
     var _DYN_PROPERTIES = "properties";
     var _DYN_DURATION = "duration";
@@ -4977,6 +5090,9 @@
                         var location_1 = getLocation();
                         uri = pageView.uri = location_1 && location_1[_DYN_HREF ] || "";
                     }
+                    if (core && core[_DYN_CONFIG ]) {
+                        uri = pageView.uri = fieldRedaction(pageView.uri, core[_DYN_CONFIG ]);
+                    }
                     if (!firstPageViewSent) {
                         var perf = getPerformance();
                         var navigationEntries = (perf && perf[_DYN_GET_ENTRIES_BY_TYPE ] && perf[_DYN_GET_ENTRIES_BY_TYPE ]("navigation"));
@@ -5436,6 +5552,9 @@
                 _self[_DYN_TRACK_PAGE_VIEW ] = function (pageView, customProperties) {
                     try {
                         var inPv = pageView || {};
+                        if (_self[_DYN_CORE ] && _self[_DYN_CORE ][_DYN_CONFIG ]) {
+                            inPv.uri = fieldRedaction(inPv.uri, _self[_DYN_CORE ][_DYN_CONFIG ]);
+                        }
                         _pageViewManager[_DYN_TRACK_PAGE_VIEW ](inPv, __assignFn(__assignFn(__assignFn({}, inPv.properties), inPv.measurements), customProperties));
                         if (_autoTrackPageVisitTime) {
                             _pageVisitTimeManager[_DYN_TRACK_PREVIOUS_PAGE_1 ](inPv.name, inPv.uri);
@@ -5448,7 +5567,10 @@
                 _self[_DYN_SEND_PAGE_VIEW_INTER2 ] = function (pageView, properties, systemProperties) {
                     var doc = getDocument();
                     if (doc) {
-                        pageView.refUri = pageView.refUri === undefined ? doc.referrer : pageView.refUri;
+                        pageView[_DYN_REF_URI ] = pageView[_DYN_REF_URI ] === undefined ? doc.referrer : pageView[_DYN_REF_URI ];
+                    }
+                    if (_self[_DYN_CORE ] && _self[_DYN_CORE ][_DYN_CONFIG ]) {
+                        pageView.refUri = fieldRedaction(pageView.refUri, _self[_DYN_CORE ][_DYN_CONFIG ]);
                     }
                     if (isNullOrUndefined(pageView[_DYN_START_TIME ])) {
                         var duration = ((properties || pageView[_DYN_PROPERTIES ] || {})[_DYN_DURATION ] || 0);
@@ -5493,6 +5615,9 @@
                             var loc = getLocation();
                             url = loc && loc[_DYN_HREF ] || "";
                         }
+                        if (_self[_DYN_CORE ] && _self[_DYN_CORE ][_DYN_CONFIG ]) {
+                            url = fieldRedaction(url, _self[_DYN_CORE ][_DYN_CONFIG ]);
+                        }
                         _pageTracking.stop(name, url, properties, measurement);
                         if (_autoTrackPageVisitTime) {
                             _pageVisitTimeManager[_DYN_TRACK_PREVIOUS_PAGE_1 ](name, url);
@@ -5759,6 +5884,9 @@
                         else {
                             _currUri = locn && locn[_DYN_HREF ] || "";
                         }
+                        if (_self[_DYN_CORE ] && _self[_DYN_CORE ][_DYN_CONFIG ]) {
+                            _currUri = fieldRedaction(_currUri, _self[_DYN_CORE ][_DYN_CONFIG ]);
+                        }
                         if (_enableAutoRouteTracking) {
                             var distributedTraceCtx = _getDistributedTraceCtx();
                             if (distributedTraceCtx) {
@@ -5835,6 +5963,9 @@
                     _autoTrackPageVisitTime = false;
                     var location = getLocation(true);
                     _prevUri = location && location[_DYN_HREF ] || "";
+                    if (_self[_DYN_CORE ] && _self[_DYN_CORE ][_DYN_CONFIG ]) {
+                        _prevUri = fieldRedaction(_prevUri, _self[_DYN_CORE ][_DYN_CONFIG ]);
+                    }
                     _currUri = null;
                     _evtNamespace = null;
                     _extConfig = null;
@@ -5850,7 +5981,7 @@
             });
             return _this;
         }
-        AnalyticsPlugin.Version = '3.3.10-nightly3.2507-07';
+        AnalyticsPlugin.Version = '3.3.10-nightly3.2507-17';
         return AnalyticsPlugin;
     }(BaseTelemetryPlugin));