@spotify-confidence/session-recording 0.18.12 → 0.18.13

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## [0.18.13](https://github.com/spotify/confidence-sdk-js/compare/session-recording-v0.18.12...session-recording-v0.18.13) (2026-09-09)
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @spotify-confidence/csr-common bumped to 0.18.10
+    * @spotify-confidence/csr-recorder bumped to 0.17.18
+
 ## [0.18.12](https://github.com/spotify/confidence-sdk-js/compare/session-recording-v0.18.11...session-recording-v0.18.12) (2026-09-07)
 
 

package/dist/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_uploader = require("./uploader-B6-mcWdA.cjs");
+const require_uploader = require("./uploader-DG4NHFfc.cjs");
 const VALID_KEY_PATTERN = /^[a-zA-Z0-9_.-]+$/;
 function validateKey(key) {
 	if (typeof key !== "string" || key.length === 0) return "key is empty";
@@ -234,12 +234,13 @@ var Recorder = class Recorder {
 		};
 	}
 	parameterizeHref(href) {
+		const strippedHref = require_uploader.stripUrlQueryAndHash(href);
 		try {
-			const url = new URL(href);
+			const url = new URL(strippedHref);
 			url.pathname = this.parameterizeRoute(url.pathname);
 			return url.toString();
 		} catch (_e) {
-			return this.parameterizeRoute(href);
+			return this.parameterizeRoute(strippedHref);
 		}
 	}
 	emitRouteChange(from, to, trigger) {
@@ -11326,7 +11327,7 @@ function observeFlags(onFlagWrite) {
 }
 //#endregion
 //#region src/version.ts
-const SDK_VERSION = "0.18.12";
+const SDK_VERSION = "0.18.13";
 //#endregion
 //#region src/index.ts
 const DEFAULT_API_URL = "https://recording.confidence.dev";

package/dist/index.d.cts

@@ -25,7 +25,7 @@ type UserAgentContext = {
   screenWidth?: number;
   screenHeight?: number;
   devicePixelRatio?: number; /** Initial document URI — without query/hash to avoid leaking PII. */
-  uri?: string;
+  uri?: string; /** Document referrer — without query/hash to avoid leaking PII. */
   referrer?: string;
 };
 interface ClientContext {

package/dist/index.d.ts

@@ -25,7 +25,7 @@ type UserAgentContext = {
   screenWidth?: number;
   screenHeight?: number;
   devicePixelRatio?: number; /** Initial document URI — without query/hash to avoid leaking PII. */
-  uri?: string;
+  uri?: string; /** Document referrer — without query/hash to avoid leaking PII. */
   referrer?: string;
 };
 interface ClientContext {

package/dist/index.js

@@ -1,4 +1,4 @@
-import { r as RecordingPluginName, t as createUploader } from "./uploader-vqAzevKI.js";
+import { i as RecordingPluginName, r as stripUrlQueryAndHash, t as createUploader } from "./uploader-Dj4tUQ6O.js";
 const VALID_KEY_PATTERN = /^[a-zA-Z0-9_.-]+$/;
 function validateKey(key) {
 	if (typeof key !== "string" || key.length === 0) return "key is empty";
@@ -233,12 +233,13 @@ var Recorder = class Recorder {
 		};
 	}
 	parameterizeHref(href) {
+		const strippedHref = stripUrlQueryAndHash(href);
 		try {
-			const url = new URL(href);
+			const url = new URL(strippedHref);
 			url.pathname = this.parameterizeRoute(url.pathname);
 			return url.toString();
 		} catch (_e) {
-			return this.parameterizeRoute(href);
+			return this.parameterizeRoute(strippedHref);
 		}
 	}
 	emitRouteChange(from, to, trigger) {
@@ -11307,7 +11308,7 @@ function observeFlags(onFlagWrite) {
 }
 //#endregion
 //#region src/version.ts
-const SDK_VERSION = "0.18.12";
+const SDK_VERSION = "0.18.13";
 //#endregion
 //#region src/index.ts
 const DEFAULT_API_URL = "https://recording.confidence.dev";

package/dist/{uploader-B6-mcWdA.cjs → uploader-DG4NHFfc.cjs}

@@ -50,6 +50,12 @@ const RecordingPluginName = {
 	FlagEvaluation: "csr:flagEvaluation"
 };
 //#endregion
+//#region ../csr-common/src/url.ts
+/** Remove query strings and fragments, including from relative or malformed URLs. */
+function stripUrlQueryAndHash(url) {
+	return url.split(/[?#]/, 1)[0];
+}
+//#endregion
 //#region ../csr-common/src/metrics.ts
 const RecordingMetricKey = {
 	Click: "clicks",
@@ -1845,7 +1851,7 @@ function collectUserAgentContext() {
 		screenHeight: window.screen.height,
 		devicePixelRatio: window.devicePixelRatio,
 		uri: `${window.location.origin}${window.location.pathname}`,
-		referrer: document.referrer
+		referrer: stripUrlQueryAndHash(document.referrer)
 	};
 }
 //#endregion
@@ -2160,6 +2166,12 @@ Object.defineProperty(exports, "createUploader", {
 		return createUploader;
 	}
 });
+Object.defineProperty(exports, "stripUrlQueryAndHash", {
+	enumerable: true,
+	get: function() {
+		return stripUrlQueryAndHash;
+	}
+});
 Object.defineProperty(exports, "workerScript", {
 	enumerable: true,
 	get: function() {

package/dist/{uploader-vqAzevKI.js → uploader-Dj4tUQ6O.js}

@@ -50,6 +50,12 @@ const RecordingPluginName = {
 	FlagEvaluation: "csr:flagEvaluation"
 };
 //#endregion
+//#region ../csr-common/src/url.ts
+/** Remove query strings and fragments, including from relative or malformed URLs. */
+function stripUrlQueryAndHash(url) {
+	return url.split(/[?#]/, 1)[0];
+}
+//#endregion
 //#region ../csr-common/src/metrics.ts
 const RecordingMetricKey = {
 	Click: "clicks",
@@ -1845,7 +1851,7 @@ function collectUserAgentContext() {
 		screenHeight: window.screen.height,
 		devicePixelRatio: window.devicePixelRatio,
 		uri: `${window.location.origin}${window.location.pathname}`,
-		referrer: document.referrer
+		referrer: stripUrlQueryAndHash(document.referrer)
 	};
 }
 //#endregion
@@ -2148,4 +2154,4 @@ function writeCounter(counter) {
 	sessionStorage.setItem(STORAGE_COUNTER, String(counter));
 }
 //#endregion
-export { workerScript as n, RecordingPluginName as r, createUploader as t };
+export { RecordingPluginName as i, workerScript as n, stripUrlQueryAndHash as r, createUploader as t };

package/dist/worker.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_uploader = require("./uploader-B6-mcWdA.cjs");
+const require_uploader = require("./uploader-DG4NHFfc.cjs");
 exports.workerScript = require_uploader.workerScript;

package/dist/worker.js

@@ -1,2 +1,2 @@
-import { n as workerScript } from "./uploader-vqAzevKI.js";
+import { n as workerScript } from "./uploader-Dj4tUQ6O.js";
 export { workerScript };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@spotify-confidence/session-recording",
   "license": "Apache-2.0",
-  "version": "0.18.12",
+  "version": "0.18.13",
   "repository": {
     "type": "git",
     "url": "https://github.com/spotify/confidence-sdk-js.git",
@@ -41,8 +41,8 @@
     }
   },
   "dependencies": {
-    "@spotify-confidence/csr-common": "0.18.9",
-    "@spotify-confidence/csr-recorder": "0.17.17"
+    "@spotify-confidence/csr-common": "0.18.10",
+    "@spotify-confidence/csr-recorder": "0.17.18"
   },
   "module": "./dist/index.js",
   "exports": {

package/src/version.ts

@@ -1 +1 @@
-export const SDK_VERSION = '0.18.12';
+export const SDK_VERSION = '0.18.13';