@posthog/browser-common 0.3.0 → 0.3.1

package/dist/config.js

@@ -26,7 +26,7 @@ __webpack_require__.r(__webpack_exports__);
 __webpack_require__.d(__webpack_exports__, {
     default: ()=>__WEBPACK_DEFAULT_EXPORT__
 });
-const packageVersion = "0.3.0";
+const packageVersion = "0.3.1";
 const Config = {
     DEBUG: false,
     LIB_VERSION: packageVersion,

package/dist/config.mjs

@@ -1,4 +1,4 @@
-const packageVersion = "0.3.0";
+const packageVersion = "0.3.1";
 const Config = {
     DEBUG: false,
     LIB_VERSION: packageVersion,

package/dist/utils/autocapture-utils.js

@@ -334,18 +334,68 @@ function isSensitiveElement(el) {
 }
 const coreCCPattern = "(4[0-9]{12}(?:[0-9]{3})?)|(5[1-5][0-9]{14})|(6(?:011|5[0-9]{2})[0-9]{12})|(3[47][0-9]{13})|(3(?:0[0-5]|[68][0-9])[0-9]{11})|((?:2131|1800|35[0-9]{3})[0-9]{11})";
 const anchoredCCRegex = new RegExp(`^(?:${coreCCPattern})$`);
-const unanchoredCCRegex = new RegExp(coreCCPattern);
+const networkCCCandidateRegex = /(^|[^0-9A-Za-z_])([0-9][0-9 -]*[0-9])(?=$|[^0-9A-Za-z_])/g;
+const networkCCLengths = [
+    16,
+    15,
+    14,
+    13
+];
 const coreSSNPattern = "\\d{3}-?\\d{2}-?\\d{4}";
 const anchoredSSNRegex = new RegExp(`^(${coreSSNPattern})$`);
-const unanchoredSSNRegex = new RegExp(`(${coreSSNPattern})`);
+const networkSSNPattern = "(?!000|666)[0-9]{3}-?(?!00)[0-9]{2}-?(?!0000)[0-9]{4}";
+const networkSSNCandidateRegex = new RegExp(`(^|[^0-9])(${networkSSNPattern})(?=$|([^0-9]))`, 'g');
+const identifierCharacterRegex = /[0-9A-Za-z_]/;
+function passesLuhnCheck(value) {
+    let sum = 0;
+    let shouldDouble = false;
+    for(let i = value.length - 1; i >= 0; i--){
+        let digit = value.charCodeAt(i) - 48;
+        if (shouldDouble) {
+            digit *= 2;
+            if (digit > 9) digit -= 9;
+        }
+        sum += digit;
+        shouldDouble = !shouldDouble;
+    }
+    return sum % 10 === 0;
+}
+function containsCreditCardNumber(value) {
+    networkCCCandidateRegex.lastIndex = 0;
+    let match;
+    while(match = networkCCCandidateRegex.exec(value)){
+        const matchedCandidate = match[2];
+        if (!matchedCandidate) continue;
+        const candidate = matchedCandidate.replace(/[- ]/g, '');
+        for(let start = 0; start < candidate.length; start++)for (const length of networkCCLengths){
+            const end = start + length;
+            if (end <= candidate.length) {
+                const possibleCardNumber = candidate.slice(start, end);
+                if (anchoredCCRegex.test(possibleCardNumber) && passesLuhnCheck(possibleCardNumber)) return true;
+            }
+        }
+    }
+    return false;
+}
+function containsSSN(value) {
+    networkSSNCandidateRegex.lastIndex = 0;
+    let match;
+    while(match = networkSSNCandidateRegex.exec(value)){
+        const characterBefore = match[1];
+        const characterAfter = match[3];
+        if (characterBefore && characterAfter && identifierCharacterRegex.test(characterBefore) && identifierCharacterRegex.test(characterAfter)) continue;
+        return true;
+    }
+    return false;
+}
 function shouldCaptureValue(value, anchorRegexes = true) {
     if ((0, core_namespaceObject.isNullish)(value)) return false;
     if ((0, core_namespaceObject.isString)(value)) {
         value = (0, core_namespaceObject.trim)(value);
-        const ccRegex = anchorRegexes ? anchoredCCRegex : unanchoredCCRegex;
-        if (ccRegex.test((value || '').replace(/[- ]/g, ''))) return false;
-        const ssnRegex = anchorRegexes ? anchoredSSNRegex : unanchoredSSNRegex;
-        if (ssnRegex.test(value)) return false;
+        const containsCreditCard = anchorRegexes ? anchoredCCRegex.test((value || '').replace(/[- ]/g, '')) : containsCreditCardNumber(value);
+        if (containsCreditCard) return false;
+        const containsSocialSecurityNumber = anchorRegexes ? anchoredSSNRegex.test(value) : containsSSN(value);
+        if (containsSocialSecurityNumber) return false;
     }
     return true;
 }

package/dist/utils/autocapture-utils.mjs

@@ -286,18 +286,68 @@ function isSensitiveElement(el) {
 }
 const coreCCPattern = "(4[0-9]{12}(?:[0-9]{3})?)|(5[1-5][0-9]{14})|(6(?:011|5[0-9]{2})[0-9]{12})|(3[47][0-9]{13})|(3(?:0[0-5]|[68][0-9])[0-9]{11})|((?:2131|1800|35[0-9]{3})[0-9]{11})";
 const anchoredCCRegex = new RegExp(`^(?:${coreCCPattern})$`);
-const unanchoredCCRegex = new RegExp(coreCCPattern);
+const networkCCCandidateRegex = /(^|[^0-9A-Za-z_])([0-9][0-9 -]*[0-9])(?=$|[^0-9A-Za-z_])/g;
+const networkCCLengths = [
+    16,
+    15,
+    14,
+    13
+];
 const coreSSNPattern = "\\d{3}-?\\d{2}-?\\d{4}";
 const anchoredSSNRegex = new RegExp(`^(${coreSSNPattern})$`);
-const unanchoredSSNRegex = new RegExp(`(${coreSSNPattern})`);
+const networkSSNPattern = "(?!000|666)[0-9]{3}-?(?!00)[0-9]{2}-?(?!0000)[0-9]{4}";
+const networkSSNCandidateRegex = new RegExp(`(^|[^0-9])(${networkSSNPattern})(?=$|([^0-9]))`, 'g');
+const identifierCharacterRegex = /[0-9A-Za-z_]/;
+function passesLuhnCheck(value) {
+    let sum = 0;
+    let shouldDouble = false;
+    for(let i = value.length - 1; i >= 0; i--){
+        let digit = value.charCodeAt(i) - 48;
+        if (shouldDouble) {
+            digit *= 2;
+            if (digit > 9) digit -= 9;
+        }
+        sum += digit;
+        shouldDouble = !shouldDouble;
+    }
+    return sum % 10 === 0;
+}
+function containsCreditCardNumber(value) {
+    networkCCCandidateRegex.lastIndex = 0;
+    let match;
+    while(match = networkCCCandidateRegex.exec(value)){
+        const matchedCandidate = match[2];
+        if (!matchedCandidate) continue;
+        const candidate = matchedCandidate.replace(/[- ]/g, '');
+        for(let start = 0; start < candidate.length; start++)for (const length of networkCCLengths){
+            const end = start + length;
+            if (end <= candidate.length) {
+                const possibleCardNumber = candidate.slice(start, end);
+                if (anchoredCCRegex.test(possibleCardNumber) && passesLuhnCheck(possibleCardNumber)) return true;
+            }
+        }
+    }
+    return false;
+}
+function containsSSN(value) {
+    networkSSNCandidateRegex.lastIndex = 0;
+    let match;
+    while(match = networkSSNCandidateRegex.exec(value)){
+        const characterBefore = match[1];
+        const characterAfter = match[3];
+        if (characterBefore && characterAfter && identifierCharacterRegex.test(characterBefore) && identifierCharacterRegex.test(characterAfter)) continue;
+        return true;
+    }
+    return false;
+}
 function shouldCaptureValue(value, anchorRegexes = true) {
     if (isNullish(value)) return false;
     if (isString(value)) {
         value = trim(value);
-        const ccRegex = anchorRegexes ? anchoredCCRegex : unanchoredCCRegex;
-        if (ccRegex.test((value || '').replace(/[- ]/g, ''))) return false;
-        const ssnRegex = anchorRegexes ? anchoredSSNRegex : unanchoredSSNRegex;
-        if (ssnRegex.test(value)) return false;
+        const containsCreditCard = anchorRegexes ? anchoredCCRegex.test((value || '').replace(/[- ]/g, '')) : containsCreditCardNumber(value);
+        if (containsCreditCard) return false;
+        const containsSocialSecurityNumber = anchorRegexes ? anchoredSSNRegex.test(value) : containsSSN(value);
+        if (containsSocialSecurityNumber) return false;
     }
     return true;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@posthog/browser-common",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Internal shared browser utilities and extension primitives for PostHog Browser SDKs",
   "license": "MIT",
   "repository": {
@@ -65,8 +65,8 @@
     }
   },
   "dependencies": {
-    "@posthog/core": "^1.46.0",
-    "@posthog/types": "^1.399.0"
+    "@posthog/types": "^1.399.0",
+    "@posthog/core": "^1.46.0"
   },
   "devDependencies": {
     "@rslib/core": "0.10.6",