@microsoft/applicationinsights-dependencies-js 3.3.10-nightly3.2507-07 → 3.3.10-nightly3.2507-17

package/browser/es5/applicationinsights-dependencies-js.integrity.json

@@ -1,65 +1,65 @@
 {
     "name": "applicationinsights-dependencies-js",
-    "version": "3.3.10-nightly3.2507-07",
+    "version": "3.3.10-nightly3.2507-17",
     "ext": {
         "@cjs.js": {
             "file": "applicationinsights-dependencies-js.cjs.js",
             "type": "text/javascript; charset=utf-8",
-            "integrity": "sha256-1C4H+jAhtumx5x0LI4NO3AI7/k27qpRIcjFPlCLFEB4= sha384-CPm1V1QdQqe7Amm55FWeSoBVBxkSgPR9jhjzOWiK4PvaEeRpU6SytlAxYaIwWAoH sha512-xRYy35sMwEWi3wsUSKKcPOTzISJUo4BrYbCvdMPsnAgeHRscHcOo/TwIr96tb1ZZUtOPeDpAwGc4WKa69vYL7g==",
+            "integrity": "sha256-2xB7B2huj5TimTHPnfslHKryFwFS13Mr4+fsy3qJCh0= sha384-Eq6tASCO2Y3Qqkqj2IBqbGcxay/c9EBHm4tOE+QnpiZym7USV/Twp5xcyWBxhNSe sha512-3gQk1PGF4mBzo6JYV1A0vkV7OXR69fsObt7ZqiWPIVavY7HogF884JpCK2j7MCj8cpHClcI6CtmA2s6l4AroMA==",
             "hashes": {
-                "sha256": "1C4H+jAhtumx5x0LI4NO3AI7/k27qpRIcjFPlCLFEB4=",
-                "sha384": "CPm1V1QdQqe7Amm55FWeSoBVBxkSgPR9jhjzOWiK4PvaEeRpU6SytlAxYaIwWAoH",
-                "sha512": "xRYy35sMwEWi3wsUSKKcPOTzISJUo4BrYbCvdMPsnAgeHRscHcOo/TwIr96tb1ZZUtOPeDpAwGc4WKa69vYL7g=="
+                "sha256": "2xB7B2huj5TimTHPnfslHKryFwFS13Mr4+fsy3qJCh0=",
+                "sha384": "Eq6tASCO2Y3Qqkqj2IBqbGcxay/c9EBHm4tOE+QnpiZym7USV/Twp5xcyWBxhNSe",
+                "sha512": "3gQk1PGF4mBzo6JYV1A0vkV7OXR69fsObt7ZqiWPIVavY7HogF884JpCK2j7MCj8cpHClcI6CtmA2s6l4AroMA=="
             }
         },
         "@cjs.min.js": {
             "file": "applicationinsights-dependencies-js.cjs.min.js",
             "type": "text/javascript; charset=utf-8",
-            "integrity": "sha256-RovT9KafvawC0+NiiMxiTvCDtDpKawGBrdqWX2HfOtA= sha384-Zjqci6Sp/mqud9aKOhvOSgpmb5BYwDzWm+hLZ5cdqKXseBHGvbDoDwg6XDF7IykG sha512-vA7lOIBPxGzba5cVEzlpzOY/fLlDpIXTNL5Jmz7xile+Ta+DQaVFgMY9D95YE1YdQIfJn63YtnCUudigo9l9Rg==",
+            "integrity": "sha256-NF7JVnZImnfsbMWzWtIMOOCfZHjsfjL2nayUe3wb8K0= sha384-P51BzHO9ec6kxOxWV4faOEeP/dpwKVubDXwPoETlQDBpQL579MljlgH/H37OFxqb sha512-5LnQS2ajjhW+B22O4tTAZDXAseYob8W+qjMX53MzLyH+7+myFaiG2oQ07x4qbyGDwFU20Z/LiMQOCyXgxhnoFQ==",
             "hashes": {
-                "sha256": "RovT9KafvawC0+NiiMxiTvCDtDpKawGBrdqWX2HfOtA=",
-                "sha384": "Zjqci6Sp/mqud9aKOhvOSgpmb5BYwDzWm+hLZ5cdqKXseBHGvbDoDwg6XDF7IykG",
-                "sha512": "vA7lOIBPxGzba5cVEzlpzOY/fLlDpIXTNL5Jmz7xile+Ta+DQaVFgMY9D95YE1YdQIfJn63YtnCUudigo9l9Rg=="
+                "sha256": "NF7JVnZImnfsbMWzWtIMOOCfZHjsfjL2nayUe3wb8K0=",
+                "sha384": "P51BzHO9ec6kxOxWV4faOEeP/dpwKVubDXwPoETlQDBpQL579MljlgH/H37OFxqb",
+                "sha512": "5LnQS2ajjhW+B22O4tTAZDXAseYob8W+qjMX53MzLyH+7+myFaiG2oQ07x4qbyGDwFU20Z/LiMQOCyXgxhnoFQ=="
             }
         },
         "@gbl.js": {
             "file": "applicationinsights-dependencies-js.gbl.js",
             "type": "text/javascript; charset=utf-8",
-            "integrity": "sha256-YEiTVFplWgte5X+jJHSD/0GFK2KJCbskNRSwt/fbF7c= sha384-HaLAXJVHwVc471ZPDpRZWH/rcZb5HghkzlUFfMR+UyE7iVtY0GGuAUPh2L/EZvuy sha512-00k8dIkNKqRi0RyLc5W/sstBCrgAar7sZj5waOtoEoojM4olING0+Ensh9KkjikkL+aShGR0rGXwXT7FKz1DVQ==",
+            "integrity": "sha256-rgOz6HV9izttLvdLikCkTdoF8scCcnkW/pMfxeGYc58= sha384-1CkdoePuL1Yi5d0MyQRt04o3M5A3aDpaGq9zWzNrlOIaeLn+sQm39Rlt3NeoCux4 sha512-Z/AX8lLeNHl1EApSU08CzbsjCjj/2AYCCfc4oUdacIZMa6165tW2F2SqGOwnjqEBcPTfjkRE+Ck2PJoWIMnoTg==",
             "hashes": {
-                "sha256": "YEiTVFplWgte5X+jJHSD/0GFK2KJCbskNRSwt/fbF7c=",
-                "sha384": "HaLAXJVHwVc471ZPDpRZWH/rcZb5HghkzlUFfMR+UyE7iVtY0GGuAUPh2L/EZvuy",
-                "sha512": "00k8dIkNKqRi0RyLc5W/sstBCrgAar7sZj5waOtoEoojM4olING0+Ensh9KkjikkL+aShGR0rGXwXT7FKz1DVQ=="
+                "sha256": "rgOz6HV9izttLvdLikCkTdoF8scCcnkW/pMfxeGYc58=",
+                "sha384": "1CkdoePuL1Yi5d0MyQRt04o3M5A3aDpaGq9zWzNrlOIaeLn+sQm39Rlt3NeoCux4",
+                "sha512": "Z/AX8lLeNHl1EApSU08CzbsjCjj/2AYCCfc4oUdacIZMa6165tW2F2SqGOwnjqEBcPTfjkRE+Ck2PJoWIMnoTg=="
             }
         },
         "@gbl.min.js": {
             "file": "applicationinsights-dependencies-js.gbl.min.js",
             "type": "text/javascript; charset=utf-8",
-            "integrity": "sha256-UtDeZLkNoHzW/V+qIqRuMc1i2hdbo+DPSYBWMPa0xlE= sha384-TWCNX+We24LA+MM/l8Mpky8TJq/O/CKoeZlhonmRF8iXtpH/PrDoF4AMfDphx9o4 sha512-ofBA/lqq+4Burhy8mqR2pIjjuAprfqWRUE8MgJp/NMnmRkqFX2kzmfcWeDius2jrHGPCM8jgftK/9uHxNBEVvA==",
+            "integrity": "sha256-gCmSYbK2Z8HDZcbzWREgHGQrtyRtzfuGeM9ZdspV7j0= sha384-3uVQ+CgbBkyg3BMbaqK5LtjF/gU7Npt92htW4DFUYeHpgqmpc5oDUu+Wj7aLqRbs sha512-uIaSjh6na/tNyustMyzSYaXDQTlNiZ38qGa6Sq0A3otTZwO8Yd7xmpsjlPPO6VbNyZsiwSgguRMHOyFgey15Cw==",
             "hashes": {
-                "sha256": "UtDeZLkNoHzW/V+qIqRuMc1i2hdbo+DPSYBWMPa0xlE=",
-                "sha384": "TWCNX+We24LA+MM/l8Mpky8TJq/O/CKoeZlhonmRF8iXtpH/PrDoF4AMfDphx9o4",
-                "sha512": "ofBA/lqq+4Burhy8mqR2pIjjuAprfqWRUE8MgJp/NMnmRkqFX2kzmfcWeDius2jrHGPCM8jgftK/9uHxNBEVvA=="
+                "sha256": "gCmSYbK2Z8HDZcbzWREgHGQrtyRtzfuGeM9ZdspV7j0=",
+                "sha384": "3uVQ+CgbBkyg3BMbaqK5LtjF/gU7Npt92htW4DFUYeHpgqmpc5oDUu+Wj7aLqRbs",
+                "sha512": "uIaSjh6na/tNyustMyzSYaXDQTlNiZ38qGa6Sq0A3otTZwO8Yd7xmpsjlPPO6VbNyZsiwSgguRMHOyFgey15Cw=="
             }
         },
         "@js": {
             "file": "applicationinsights-dependencies-js.js",
             "type": "text/javascript; charset=utf-8",
-            "integrity": "sha256-muZ5SMwTtV9lSMgo+Lnzb8npqWZ8pcHo5SKWMozHdwY= sha384-5XRKrdF91QhruuxX5wDfpM7F1CxX6RpdOu0U8gPQ7H+vCIGa9tTUXNYSKgIuzEnl sha512-vp7GdTU8GcpNtKiWcLWgz45c0RcNeEO63KKwGj/1PN3Y/1xB8WhlCUnHetQak1w4R19l5lAJb0i0bqKYNjaENQ==",
+            "integrity": "sha256-PhIo2EJkeyOqt/b6mzoC37jls/1G3mzn+AyBF1j5WOM= sha384-RGJTIWN9E0Yzk3ohz60jvKhNED7Fq0LmXzp560pb2rmN6K/b29Iubvyx/eofgKhB sha512-HZzyrF0au7aCRoBwtjLY6mzwC5PFFi1EmTApGFHfAOHhUJMXe5GYUj1vLO3H5kvUM6/SrirnPtzwW7Giye4n6A==",
             "hashes": {
-                "sha256": "muZ5SMwTtV9lSMgo+Lnzb8npqWZ8pcHo5SKWMozHdwY=",
-                "sha384": "5XRKrdF91QhruuxX5wDfpM7F1CxX6RpdOu0U8gPQ7H+vCIGa9tTUXNYSKgIuzEnl",
-                "sha512": "vp7GdTU8GcpNtKiWcLWgz45c0RcNeEO63KKwGj/1PN3Y/1xB8WhlCUnHetQak1w4R19l5lAJb0i0bqKYNjaENQ=="
+                "sha256": "PhIo2EJkeyOqt/b6mzoC37jls/1G3mzn+AyBF1j5WOM=",
+                "sha384": "RGJTIWN9E0Yzk3ohz60jvKhNED7Fq0LmXzp560pb2rmN6K/b29Iubvyx/eofgKhB",
+                "sha512": "HZzyrF0au7aCRoBwtjLY6mzwC5PFFi1EmTApGFHfAOHhUJMXe5GYUj1vLO3H5kvUM6/SrirnPtzwW7Giye4n6A=="
             }
         },
         "@min.js": {
             "file": "applicationinsights-dependencies-js.min.js",
             "type": "text/javascript; charset=utf-8",
-            "integrity": "sha256-ucSUkCLp0gx21A7V8j97YRYvVFLmeDJ9tfMNQ+ktFYI= sha384-Mjx/h2CXA5twdx1SCOn8y11hn7I/GSZG5fhcNVpt9WEbNWM3WQlE3MNavsc+Zl/s sha512-X+h56+ol5THrI8heAedeB2Phsp41+XANX02zoNgb728+Y0KkTfNCXmj06qYXdnmwXaVY8KGF3ca2Qcsl17oZPA==",
+            "integrity": "sha256-at6J0f99CpA80DvgyGVLG51UJ5HQmT7UggQZDA2vjqc= sha384-F/sipAcy336ViIU+rE6rXN7SSRIBnrNNy4JubqqLRqEqC2MhEEtn/iDoVoQ55ft6 sha512-bOu0kpmtoHmbAYdY4DEKjDBQWC2RAiHl2K404o++K5LEfSiiDqnAuOGnNqsSFIuFZEGVLtIyqS3I/QoPHD5ksA==",
             "hashes": {
-                "sha256": "ucSUkCLp0gx21A7V8j97YRYvVFLmeDJ9tfMNQ+ktFYI=",
-                "sha384": "Mjx/h2CXA5twdx1SCOn8y11hn7I/GSZG5fhcNVpt9WEbNWM3WQlE3MNavsc+Zl/s",
-                "sha512": "X+h56+ol5THrI8heAedeB2Phsp41+XANX02zoNgb728+Y0KkTfNCXmj06qYXdnmwXaVY8KGF3ca2Qcsl17oZPA=="
+                "sha256": "at6J0f99CpA80DvgyGVLG51UJ5HQmT7UggQZDA2vjqc=",
+                "sha384": "F/sipAcy336ViIU+rE6rXN7SSRIBnrNNy4JubqqLRqEqC2MhEEtn/iDoVoQ55ft6",
+                "sha512": "bOu0kpmtoHmbAYdY4DEKjDBQWC2RAiHl2K404o++K5LEfSiiDqnAuOGnNqsSFIuFZEGVLtIyqS3I/QoPHD5ksA=="
             }
         }
     }

package/browser/es5/applicationinsights-dependencies-js.js

@@ -1,5 +1,5 @@
 /*!
- * Application Insights JavaScript SDK - Dependencies Plugin, 3.3.10-nightly3.2507-07
+ * Application Insights JavaScript SDK - Dependencies Plugin, 3.3.10-nightly3.2507-17
  * Copyright (c) Microsoft and contributors. All rights reserved.
  */
 (function (global, factory) {
@@ -7,8 +7,8 @@
     typeof exports === "object" && typeof module !== undef ? factory(exports) :
     typeof define === "function" && define.amd ? define(["exports"], factory) :
     (function(global){
-        var nsKey, key, nm, theExports = {}, modName = "es5_applicationinsights_dependencies_js_3_3_10_nightly3_2507_07", msMod="__ms$mod__";
-        var mods={}, modDetail=mods[modName]={}, ver="3.3.10-nightly3.2507-07";
+        var nsKey, key, nm, theExports = {}, modName = "es5_applicationinsights_dependencies_js_3_3_10_nightly3_2507_17", msMod="__ms$mod__";
+        var mods={}, modDetail=mods[modName]={}, ver="3.3.10-nightly3.2507-17";
         var baseNs=global, nsKey="Microsoft", baseNs=baseNs[nsKey]=(baseNs[nsKey]||{});
         // Versioned namespace "Microsoft.ApplicationInsights3"
         var exportNs=baseNs, nsKey="ApplicationInsights3", exportNs=exportNs[nsKey]=(exportNs[nsKey]||{});
@@ -1182,6 +1182,8 @@ var _DYN_SET_NEXT_PLUGIN = "setNextPlugin";
 var _DYN_USER_AGENT = "userAgent";
 var _DYN_SPLIT$1 = "split";
 var _DYN_REPLACE = "replace";
+var _DYN_SUBSTRING = "substring";
+var _DYN_INDEX_OF = "indexOf";
 var _DYN_TYPE = "type";
 var _DYN_IS_CHILD_EVT = "isChildEvt";
 var _DYN_GET_CTX = "getCtx";
@@ -1213,6 +1215,8 @@ var STR_PROCESS_TELEMETRY = "processTelemetry";
 var STR_PRIORITY = "priority";
 var STR_GET_PERF_MGR = "getPerfMgr";
 var STR_NOT_DYNAMIC_ERROR = "Not dynamic - ";
+var STR_REDACTED = "REDACTED";
+var DEFAULT_SENSITIVE_PARAMS = ["sig", "Signature", "AWSAccessKeyId", "X-Goog-Signature"];
 
 var strGetPrototypeOf = "getPrototypeOf";
 var rCamelCase = /-([a-z])/g;
@@ -1373,6 +1377,110 @@ function isXhrSupported() {
     }
     return isSupported;
 }
+function redactUserInfo(url) {
+    return url.replace(/^([a-zA-Z][a-zA-Z0-9+.-]*:\/\/)([^:@]{1,200}):([^@]{1,200})@(.*)$/, "$1REDACTED:REDACTED@$4");
+}
+function redactQueryParameters(url, config) {
+    var sensitiveParams;
+    var questionMarkIndex = strIndexOf(url, "?");
+    if (questionMarkIndex === -1) {
+        return url;
+    }
+    if (config && config.redactQueryParams) {
+        sensitiveParams = DEFAULT_SENSITIVE_PARAMS.concat(config.redactQueryParams);
+    }
+    else {
+        sensitiveParams = DEFAULT_SENSITIVE_PARAMS;
+    }
+    var baseUrl = strSubstring(url, 0, questionMarkIndex + 1);
+    var queryString = strSubstring(url, questionMarkIndex + 1);
+    var fragment = STR_EMPTY;
+    var hashIndex = strIndexOf(queryString, "#");
+    if (hashIndex !== -1) {
+        fragment = strSubstring(queryString, hashIndex);
+        queryString = strSubstring(queryString, 0, hashIndex);
+    }
+    var hasPotentialSensitiveParam = false;
+    for (var i = 0; i < sensitiveParams[_DYN_LENGTH$2 ]; i++) {
+        var paramCheck = sensitiveParams[i] + "=";
+        if (strIndexOf(queryString, paramCheck) !== -1) {
+            hasPotentialSensitiveParam = true;
+            break;
+        }
+    }
+    if (!hasPotentialSensitiveParam) {
+        return url;
+    }
+    var resultParts = [];
+    var anyParamRedacted = false;
+    if (queryString && queryString[_DYN_LENGTH$2 ]) {
+        var pairs = queryString[_DYN_SPLIT$1 ]("&");
+        for (var i = 0; i < pairs[_DYN_LENGTH$2 ]; i++) {
+            var pair = pairs[i];
+            if (!pair) {
+                continue;
+            }
+            var equalsIndex = strIndexOf(pair, "=");
+            if (equalsIndex === -1) {
+                resultParts[_DYN_PUSH ](pair);
+            }
+            else {
+                var paramName = pair[_DYN_SUBSTRING ](0, equalsIndex);
+                var paramValue = pair[_DYN_SUBSTRING ](equalsIndex + 1);
+                if (paramValue === STR_EMPTY) {
+                    resultParts[_DYN_PUSH ](pair);
+                }
+                else {
+                    var shouldRedact = false;
+                    for (var j = 0; j < sensitiveParams[_DYN_LENGTH$2 ]; j++) {
+                        if (paramName === sensitiveParams[j]) {
+                            shouldRedact = true;
+                            anyParamRedacted = true;
+                            break;
+                        }
+                    }
+                    if (shouldRedact) {
+                        resultParts[_DYN_PUSH ](paramName + "=" + STR_REDACTED);
+                    }
+                    else {
+                        resultParts[_DYN_PUSH ](pair);
+                    }
+                }
+            }
+        }
+    }
+    if (!anyParamRedacted) {
+        return url;
+    }
+    return baseUrl + resultParts.join("&") + fragment;
+}
+function fieldRedaction(input, config) {
+    if (!input || input[_DYN_INDEX_OF ](" ") !== -1) {
+        return input;
+    }
+    var isRedactionDisabled = config && config.redactUrls === false;
+    if (isRedactionDisabled) {
+        return input;
+    }
+    var hasCredentials = strIndexOf(input, "@") !== -1;
+    var hasQueryParams = strIndexOf(input, "?") !== -1;
+    if (!hasCredentials && !hasQueryParams) {
+        return input;
+    }
+    try {
+        var result = input;
+        if (hasCredentials) {
+            result = redactUserInfo(input);
+        }
+        if (hasQueryParams) {
+            result = redactQueryParameters(result, config);
+        }
+        return result;
+    }
+    catch (e) {
+        return input;
+    }
+}
 
 var UInt32Mask = 0x100000000;
 var MaxUInt32 = 0xffffffff;
@@ -1444,7 +1552,7 @@ function newId(maxLength) {
     return result;
 }
 
-var version = '3.3.10-nightly3.2507-07';
+var version = '3.3.10-nightly3.2507-17';
 var instanceName = "." + newId(6);
 var _dataUid = 0;
 function _canAcceptData(target) {
@@ -3311,7 +3419,7 @@ var DEFAULT_BREEZE_PATH = "/v2/track";
 var strNotSpecified = "not_specified";
 var strIkey = "iKey";
 
-var RequestHeaders = createValueMap({
+var RequestHeaders = ( /* @__PURE__ */createValueMap({
     requestContextHeader: [0 , "Request-Context"],
     requestContextTargetKey: [1 , "appId"],
     requestContextAppIdFormat: [2 , "appId=cid-v1:"],
@@ -3321,7 +3429,7 @@ var RequestHeaders = createValueMap({
     sdkContextHeader: [6 , "Sdk-Context"],
     sdkContextHeaderAppIdRequest: [7 , "appId"],
     requestContextHeaderLowerCase: [8 , "request-context"]
-});
+}));
 
 var _DYN_SPLIT = "split";
 var _DYN_LENGTH$1 = "length";
@@ -3373,7 +3481,10 @@ function dataSanitizeString(logger, value, maxLength) {
     }
     return valueTrunc || value;
 }
-function dataSanitizeUrl(logger, url) {
+function dataSanitizeUrl(logger, url, config) {
+    if (isString(url)) {
+        url = fieldRedaction(url, config);
+    }
     return dataSanitizeInput(logger, url, 2048 , 66 );
 }
 function dataSanitizeProperties(logger, properties) {
@@ -5030,6 +5141,9 @@ var AjaxMonitor = /** @class */ (function (_super) {
                         requestUrl = strSplit(location_1.href, "#")[0];
                     }
                 }
+                if (_self[_DYN_CORE ] && _self[_DYN_CORE ].config) {
+                    requestUrl = fieldRedaction(requestUrl, _self[_DYN_CORE ].config);
+                }
                 ajaxData[_DYN_REQUEST_URL ] = requestUrl;
                 var method = "GET";
                 if (init && init[_DYN_METHOD ]) {