@sailfish-ai/recorder 1.2.1 → 1.2.3

package/dist/index.js

@@ -159,6 +159,7 @@ export function matchUrlWithWildcard(url, patterns) {
 // Updated XMLHttpRequest interceptor with single check function
 // Updated XMLHttpRequest interceptor to bypass for CORS-sensitive domains
 function setupXMLHttpRequestInterceptor(domainsToNotPropagateHeaderTo, domainsToPropagateHeadersTo = []) {
+    const originalOpen = XMLHttpRequest.prototype.open;
     const originalSend = XMLHttpRequest.prototype.send;
     const sessionId = getOrSetSessionId();
     // Combine default and passed ignore domains
@@ -166,8 +167,25 @@ function setupXMLHttpRequestInterceptor(domainsToNotPropagateHeaderTo, domainsTo
         ...DOMAINS_TO_NOT_PROPAGATE_HEADER_TO_DEFAULT,
         ...domainsToNotPropagateHeaderTo,
     ];
+    // Store URL during open()
+    XMLHttpRequest.prototype.open = function (method, url, ...args) {
+        // Ensure the URL is a string, otherwise handle gracefully
+        if (typeof url === "string" && url.length > 0) {
+            this._requestUrl = url; // Capture the valid URL
+        }
+        else {
+            console.warn("Invalid or non-string URL passed to XMLHttpRequest:", url);
+            this._requestUrl = null; // Handle invalid or non-string URL
+        }
+        return originalOpen.apply(this, [method, url, ...args]);
+    };
+    // Intercept send()
     XMLHttpRequest.prototype.send = function (...args) {
-        const url = this._url;
+        const url = this._requestUrl;
+        // If no valid URL was captured, proceed without modification
+        if (!url) {
+            return originalSend.apply(this, args);
+        }
         // Bypass logic for domains listed in the combinedIgnoreDomains
         if (matchUrlWithWildcard(url, combinedIgnoreDomains)) {
             return originalSend.apply(this, args);
@@ -192,13 +210,21 @@ function setupFetchInterceptor(domainsToNotPropagateHeaderTo, domainsToPropagate
     ];
     window.fetch = function (input, init) {
         let url;
+        // Handle different types of `input` for fetch
         if (typeof input === "string") {
+            // String URL
             url = input;
         }
         else if (input instanceof Request) {
+            // Request object (we extract the URL)
             url = input.url;
         }
+        else if (input instanceof URL) {
+            // URL object
+            url = input.href;
+        }
         else {
+            // Unsupported input type, skip interception
             return originalFetch.apply(this, arguments);
         }
         // Bypass logic for domains listed in the combinedIgnoreDomains
@@ -208,6 +234,11 @@ function setupFetchInterceptor(domainsToNotPropagateHeaderTo, domainsToPropagate
         // Check if the domain should propagate headers
         const shouldPropagateHeader = domainsToPropagateHeadersTo.length === 0 ||
             matchUrlWithWildcard(url, domainsToPropagateHeadersTo);
+        // ** Skip CORS-sensitive requests **
+        // Ensure we don't modify headers for cross-origin requests to non-whitelisted domains
+        if (!shouldPropagateHeader) {
+            return originalFetch.apply(this, arguments);
+        }
         if (sessionId && shouldPropagateHeader) {
             if (input instanceof Request) {
                 const clonedRequest = input.clone();
@@ -227,6 +258,7 @@ function setupFetchInterceptor(domainsToNotPropagateHeaderTo, domainsToPropagate
             }
         }
         else {
+            // No header propagation required, proceed with original fetch
             return originalFetch.apply(this, arguments);
         }
     };