@tracelog/lib 2.7.1-rc.96.5 → 2.7.1-rc.96.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -9,7 +9,7 @@ Lightweight web analytics library for tracking user behavior. Works standalone o
9
9
  - **Privacy-first** - PII sanitization, client-side sampling, `data-tlog-ignore` attribute
10
10
  - **Cross-tab sessions** - BroadcastChannel sync with localStorage recovery
11
11
  - **Event-driven** - Subscribe via `on()`/`off()` for real-time events
12
- - **Lightweight** - Single dependency (`web-vitals`), 15KB gzipped
12
+ - **Lightweight** - Single dependency (`web-vitals`), ~62KB gzipped
13
13
 
14
14
  ## Live Demo
15
15
 
@@ -242,8 +242,8 @@ const Ht = () => {
242
242
  /Bearer\s+[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]+)?(?:\.[A-Za-z0-9_-]+)?/gi,
243
243
  // Passwords in connection strings (protocol://user:password@host)
244
244
  /:\/\/[^:/]+:([^@]+)@/gi,
245
- // Sensitive URL query parameters (token=, key=, password=, auth=, secret=, api_key=)
246
- /[?&](token|key|password|passwd|auth|secret|api_key|apikey|access_token)=[^&\s]+/gi
245
+ // Sensitive URL query parameters (token=, password=, auth=, secret=, api_key=, etc.)
246
+ /[?&](token|password|passwd|auth|secret|secret_key|private_key|auth_key|api_key|apikey|access_token)=[^&\s]+/gi
247
247
  ], We = 500, Xe = 2e3, Ge = 5e3, te = 50, Wt = te * 2, at = 1, Xt = 1e3, Gt = 10, je = 5e3, jt = 6e4, Ts = {
248
248
  LCP: 2500,
249
249
  // Good: ≤ 2.5s