@scalebun/react-native 1.3.1 → 1.3.2

package/android/src/main/java/com/scalebun/replaysdk/ReplaySdkModule.kt

@@ -301,7 +301,11 @@ class ReplaySdkModule(reactContext: ReactApplicationContext) : ReplaySdkSpec(rea
                 return
             }
 
-            val config = ReplayConfig()
+            // Honor the host's privacy config when the SDK stored one (native
+            // initialize()/initOutbox()). Falling back to a fresh ReplayConfig() — as
+            // before — still masks text inputs, since maskTextInputs defaults to true;
+            // this additionally honors maskImages / maskedElementIds and an explicit opt-out.
+            val config = outboxConfig ?: ReplayConfig()
             val captureManager = com.scalebun.replaysdk.capture.FrameCaptureManager(config)
             captureManager.capture(activity, "standalone", "unknown", reason, config) { frame ->
                 captureManager.destroy()

package/android/src/main/java/com/scalebun/replaysdk/capture/FrameCaptureManager.kt

@@ -152,7 +152,21 @@ class FrameCaptureManager(private var config: ReplayConfig) {
 
         acquireBitmap(
             activity, captureView,
-            onBitmap = { bmp -> compressAndEmit(bmp, targetWidth, targetHeight, sessionId, screenName, trigger, cfg, callback) },
+            onBitmap = { bmp ->
+                // Privacy masking on the full-res bitmap BEFORE scaling — identical to
+                // captureToFile(). Without this, the default base64 path (used whenever
+                // the native file outbox is off) uploaded text inputs UNMASKED while
+                // still stamping masked=true. FAIL CLOSED: if masking throws, the frame
+                // is DISCARDED — never emitted unmasked, never with a falsely-true flag.
+                val masked = applyMaskSafe(bmp, captureView, cfg)
+                if (masked == null) {
+                    ReplayLogger.warn("capture: masking failed — frame dropped (fail-closed)")
+                    if (!bmp.isRecycled) bmp.recycle()
+                    callback(null)
+                } else {
+                    compressAndEmit(masked, targetWidth, targetHeight, sessionId, screenName, trigger, cfg, callback)
+                }
+            },
             onFail = { callback(null) }
         )
     }
@@ -385,6 +399,11 @@ class FrameCaptureManager(private var config: ReplayConfig) {
                 val actualFormat = if (format == Bitmap.CompressFormat.JPEG) "jpeg" else "webp"
 
                 val seq = sequenceCounter.incrementAndGet()
+                // Truthful masked flag: the bitmap reaching here has already been through
+                // applyMaskSafe() in capture() (fail-closed — an unmasked frame never gets
+                // here), so this reflects what was actually configured. Mirrors
+                // compressToBytes()'s maskApplied, incl. maskedElementIds.
+                val maskApplied = cfg.maskTextInputs || cfg.maskImages || cfg.maskedElementIds.isNotEmpty()
                 val frame = ReplayFrame(
                     frameId = SessionIdGenerator.frameId(),
                     sessionId = sessionId,
@@ -397,7 +416,7 @@ class FrameCaptureManager(private var config: ReplayConfig) {
                     width = bitmap.width,
                     height = bitmap.height,
                     quality = cfg.screenshotQuality.value,
-                    masked = cfg.maskTextInputs || cfg.maskImages,
+                    masked = maskApplied,
                     base64 = base64
                 )
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scalebun/react-native",
-  "version": "1.3.1",
+  "version": "1.3.2",
   "description": "Production-grade React Native SDK for ScaleBun",
   "main": "lib/commonjs/index",
   "module": "lib/module/index",