@microsoft/applicationinsights-channel-js 3.3.10-nightly3.2507-08 → 3.3.10-nightly3.2507-17

package/browser/es5/applicationinsights-channel-js.3.cjs.js

@@ -1,5 +1,5 @@
 /*!
- * Application Insights JavaScript SDK - Channel, 3.3.10-nightly3.2507-08
+ * Application Insights JavaScript SDK - Channel, 3.3.10-nightly3.2507-17
  * Copyright (c) Microsoft and contributors. All rights reserved.
  */
 'use strict';
@@ -1167,12 +1167,12 @@ dynamicProto[DynProtoDefaultOptions] = _gblInst.o;
 var createEnumStyle = createEnum;
 var createValueMap = createTypeMap;
 
-var ActiveStatus = createEnumStyle({
+var ActiveStatus = ( /* @__PURE__ */createEnumStyle({
     NONE: 0 ,
     PENDING: 3 ,
     INACTIVE: 1 ,
     ACTIVE: 2
-});
+}));
 
 var _DYN_TO_LOWER_CASE$1 = "toLowerCase";
 var _DYN_LENGTH$2 = "length";
@@ -1206,10 +1206,11 @@ var _DYN_SET_NEXT_PLUGIN = "setNextPlugin";
 var _DYN_USER_AGENT = "userAgent";
 var _DYN_SPLIT$1 = "split";
 var _DYN_REPLACE = "replace";
+var _DYN_SUBSTRING = "substring";
+var _DYN_INDEX_OF = "indexOf";
 var _DYN_TYPE = "type";
 var _DYN_EVT_NAME = "evtName";
 var _DYN_STATUS = "status";
-var _DYN_INDEX_OF = "indexOf";
 var _DYN_GET_ALL_RESPONSE_HEA5 = "getAllResponseHeaders";
 var _DYN_IS_CHILD_EVT = "isChildEvt";
 var _DYN_DATA$1 = "data";
@@ -1562,6 +1563,8 @@ var STR_PROCESS_TELEMETRY = "processTelemetry";
 var STR_PRIORITY = "priority";
 var STR_GET_PERF_MGR = "getPerfMgr";
 var STR_NOT_DYNAMIC_ERROR = "Not dynamic - ";
+var STR_REDACTED = "REDACTED";
+var DEFAULT_SENSITIVE_PARAMS = ["sig", "Signature", "AWSAccessKeyId", "X-Goog-Signature"];
 
 var rCamelCase = /-([a-z])/g;
 var rNormalizeInvalid = /([^\w\d_$])/g;
@@ -1779,7 +1782,7 @@ function convertAllHeadersToMap(headersString) {
                 var idx = headerEntry[_DYN_INDEX_OF ](": ");
                 if (idx !== -1) {
                     var header = strTrim(headerEntry.substring(0, idx))[_DYN_TO_LOWER_CASE$1 ]();
-                    var value = strTrim(headerEntry.substring(idx + 1));
+                    var value = strTrim(headerEntry[_DYN_SUBSTRING ](idx + 1));
                     headers[header] = value;
                 }
                 else {
@@ -1955,6 +1958,110 @@ function isXhrSupported() {
     }
     return isSupported;
 }
+function redactUserInfo(url) {
+    return url.replace(/^([a-zA-Z][a-zA-Z0-9+.-]*:\/\/)([^:@]{1,200}):([^@]{1,200})@(.*)$/, "$1REDACTED:REDACTED@$4");
+}
+function redactQueryParameters(url, config) {
+    var sensitiveParams;
+    var questionMarkIndex = strIndexOf(url, "?");
+    if (questionMarkIndex === -1) {
+        return url;
+    }
+    if (config && config.redactQueryParams) {
+        sensitiveParams = DEFAULT_SENSITIVE_PARAMS.concat(config.redactQueryParams);
+    }
+    else {
+        sensitiveParams = DEFAULT_SENSITIVE_PARAMS;
+    }
+    var baseUrl = strSubstring(url, 0, questionMarkIndex + 1);
+    var queryString = strSubstring(url, questionMarkIndex + 1);
+    var fragment = STR_EMPTY$1;
+    var hashIndex = strIndexOf(queryString, "#");
+    if (hashIndex !== -1) {
+        fragment = strSubstring(queryString, hashIndex);
+        queryString = strSubstring(queryString, 0, hashIndex);
+    }
+    var hasPotentialSensitiveParam = false;
+    for (var i = 0; i < sensitiveParams[_DYN_LENGTH$2 ]; i++) {
+        var paramCheck = sensitiveParams[i] + "=";
+        if (strIndexOf(queryString, paramCheck) !== -1) {
+            hasPotentialSensitiveParam = true;
+            break;
+        }
+    }
+    if (!hasPotentialSensitiveParam) {
+        return url;
+    }
+    var resultParts = [];
+    var anyParamRedacted = false;
+    if (queryString && queryString[_DYN_LENGTH$2 ]) {
+        var pairs = queryString[_DYN_SPLIT$1 ]("&");
+        for (var i = 0; i < pairs[_DYN_LENGTH$2 ]; i++) {
+            var pair = pairs[i];
+            if (!pair) {
+                continue;
+            }
+            var equalsIndex = strIndexOf(pair, "=");
+            if (equalsIndex === -1) {
+                resultParts[_DYN_PUSH$1 ](pair);
+            }
+            else {
+                var paramName = pair[_DYN_SUBSTRING ](0, equalsIndex);
+                var paramValue = pair[_DYN_SUBSTRING ](equalsIndex + 1);
+                if (paramValue === STR_EMPTY$1) {
+                    resultParts[_DYN_PUSH$1 ](pair);
+                }
+                else {
+                    var shouldRedact = false;
+                    for (var j = 0; j < sensitiveParams[_DYN_LENGTH$2 ]; j++) {
+                        if (paramName === sensitiveParams[j]) {
+                            shouldRedact = true;
+                            anyParamRedacted = true;
+                            break;
+                        }
+                    }
+                    if (shouldRedact) {
+                        resultParts[_DYN_PUSH$1 ](paramName + "=" + STR_REDACTED);
+                    }
+                    else {
+                        resultParts[_DYN_PUSH$1 ](pair);
+                    }
+                }
+            }
+        }
+    }
+    if (!anyParamRedacted) {
+        return url;
+    }
+    return baseUrl + resultParts.join("&") + fragment;
+}
+function fieldRedaction(input, config) {
+    if (!input || input[_DYN_INDEX_OF ](" ") !== -1) {
+        return input;
+    }
+    var isRedactionDisabled = config && config.redactUrls === false;
+    if (isRedactionDisabled) {
+        return input;
+    }
+    var hasCredentials = strIndexOf(input, "@") !== -1;
+    var hasQueryParams = strIndexOf(input, "?") !== -1;
+    if (!hasCredentials && !hasQueryParams) {
+        return input;
+    }
+    try {
+        var result = input;
+        if (hasCredentials) {
+            result = redactUserInfo(input);
+        }
+        if (hasQueryParams) {
+            result = redactQueryParameters(result, config);
+        }
+        return result;
+    }
+    catch (e) {
+        return input;
+    }
+}
 
 var UInt32Mask = 0x100000000;
 var MaxUInt32 = 0xffffffff;
@@ -2026,7 +2133,7 @@ function newId(maxLength) {
     return result;
 }
 
-var version = '3.3.10-nightly3.2507-08';
+var version = '3.3.10-nightly3.2507-17';
 var instanceName = "." + newId(6);
 var _dataUid = 0;
 function _canAcceptData(target) {
@@ -4291,7 +4398,7 @@ var DEFAULT_BREEZE_ENDPOINT = "https://dc.services.visualstudio.com";
 var DEFAULT_BREEZE_PATH = "/v2/track";
 var strNotSpecified = "not_specified";
 
-var RequestHeaders = createValueMap({
+var RequestHeaders = ( /* @__PURE__ */createValueMap({
     requestContextHeader: [0 , "Request-Context"],
     requestContextTargetKey: [1 , "appId"],
     requestContextAppIdFormat: [2 , "appId=cid-v1:"],
@@ -4301,7 +4408,7 @@ var RequestHeaders = createValueMap({
     sdkContextHeader: [6 , "Sdk-Context"],
     sdkContextHeaderAppIdRequest: [7 , "appId"],
     requestContextHeaderLowerCase: [8 , "request-context"]
-});
+}));
 
 var _DYN_SPLIT = "split";
 var _DYN_LENGTH$1 = "length";
@@ -4367,7 +4474,10 @@ function dataSanitizeString(logger, value, maxLength) {
     }
     return valueTrunc || value;
 }
-function dataSanitizeUrl(logger, url) {
+function dataSanitizeUrl(logger, url, config) {
+    if (isString(url)) {
+        url = fieldRedaction(url, config);
+    }
     return dataSanitizeInput(logger, url, 2048 , 66 );
 }
 function dataSanitizeMessage(logger, message) {
@@ -4532,10 +4642,10 @@ function AjaxHelperParseDependencyPath(logger, absoluteUrl, method, commandName)
     };
 }
 
-var StorageType = createEnumStyle({
+var StorageType = ( /* @__PURE__ */createEnumStyle({
     LocalStorage: 0 ,
     SessionStorage: 1
-});
+}));
 
 var _canUseSessionStorage = undefined;
 var _storagePrefix = "";
@@ -5801,7 +5911,7 @@ function EnvelopeCreatorInit(logger, telemetryItem) {
     }
 }
 var EnvelopeCreator = {
-    Version: '3.3.10-nightly3.2507-08'
+    Version: '3.3.10-nightly3.2507-17'
 };
 function DependencyEnvelopeCreator(logger, telemetryItem, customUndefinedValue) {
     EnvelopeCreatorInit(logger, telemetryItem);