perimeterx-js-core 0.20.0 → 0.20.1

package/lib/cjs/graphql/DefaultGraphQLParser.js

@@ -201,8 +201,9 @@ var DefaultGraphQLParser = /** @class */ (function () {
         return /^\s*{/.test(query);
     };
     DefaultGraphQLParser.prototype.getOperationName = function (operationNameToTypeMap, operation) {
+        var _a;
         return (operation.operationName ||
-            (Object.keys(operationNameToTypeMap).length === 1 ? Object.keys(operationNameToTypeMap)[0] : undefined));
+            (Object.keys(operationNameToTypeMap).length === 1 ? (_a = Object.keys(operationNameToTypeMap)) === null || _a === void 0 ? void 0 : _a[0] : undefined));
     };
     DefaultGraphQLParser.prototype.getQueryKeywords = function (query, context) {
         var _a;
@@ -272,7 +273,10 @@ var DefaultGraphQLParser = /** @class */ (function () {
         return (this.config.sensitiveGraphqlOperationTypes.some(function (type) { return type === operationType; }) ||
             this.config.sensitiveGraphqlOperationNames.some(function (name) {
                 var pattern = _this.toGlobalRegExp(name);
-                return pattern.test(operationName) || (keywords === null || keywords === void 0 ? void 0 : keywords.some(function (kw) { return pattern.test(kw); }));
+                if (!pattern) {
+                    return false;
+                }
+                return !!(operationName === null || operationName === void 0 ? void 0 : operationName.match(pattern)) || (keywords === null || keywords === void 0 ? void 0 : keywords.some(function (kw) { return !!kw.match(pattern); }));
             }));
     };
     DefaultGraphQLParser.prototype.extractGraphQLVariableNames = function (variables) {

package/lib/cjs/products/credential_intelligence/endpoint/login_successful/BodyLoginSuccessfulParser.js

@@ -42,10 +42,11 @@ var BodyLoginSuccessfulParser = /** @class */ (function () {
         this.bodyRegex = new RegExp(regex);
     }
     BodyLoginSuccessfulParser.prototype.isLoginSuccessful = function (response) {
+        var _a, _b;
         return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
+            return __generator(this, function (_c) {
                 // TODO: Possibly add IBody methods to IOutgoingResponse interface?
-                return [2 /*return*/, this.bodyRegex.test(response.body)];
+                return [2 /*return*/, !!((_b = (_a = response.body) === null || _a === void 0 ? void 0 : _a.match) === null || _b === void 0 ? void 0 : _b.call(_a, this.bodyRegex))];
             });
         });
     };

package/lib/cjs/products/credential_intelligence/endpoint/matcher/RegexPathEndpointMatcher.js

@@ -8,7 +8,7 @@ var RegexPathEndpointMatcher = /** @class */ (function () {
     }
     RegexPathEndpointMatcher.prototype.matches = function (_a) {
         var method = _a.method, url = _a.url;
-        return method === this.method && this.pathnameRegex.test(url.pathname);
+        return method === this.method && !!url.pathname.match(this.pathnameRegex);
     };
     return RegexPathEndpointMatcher;
 }());

package/lib/cjs/telemetry/DefaultTelemetry.js

@@ -143,9 +143,9 @@ var DefaultTelemetry = /** @class */ (function () {
             'px_remote_config_auth_token',
         ];
         var telemetryConfig = {
-            active_config: (0, utils_1.removeSensitiveFields)(this.config.getActiveConfig(), SENSITIVE_CONFIG_FIELDS),
-            static_config: (0, utils_1.removeSensitiveFields)(this.config.getStaticConfig(), SENSITIVE_CONFIG_FIELDS),
-            remote_config: (0, utils_1.removeSensitiveFields)(this.config.getRemoteConfig(), SENSITIVE_CONFIG_FIELDS),
+            active_config: (0, utils_1.redactSensitiveFields)(this.config.getActiveConfig(), SENSITIVE_CONFIG_FIELDS),
+            static_config: (0, utils_1.redactSensitiveFields)(this.config.getStaticConfig(), SENSITIVE_CONFIG_FIELDS),
+            remote_config: (0, utils_1.redactSensitiveFields)(this.config.getRemoteConfig(), SENSITIVE_CONFIG_FIELDS),
         };
         var activity = {
             type: activities_1.ActivityType.ENFORCER_TELEMETRY,

package/lib/cjs/utils/constants.js

@@ -13,4 +13,4 @@ exports.PUSH_DATA_HMAC_HEADER_NAME = 'x-px-pushdata';
 exports.PUSH_DATA_FEATURE_HEADER_NAME = 'x-px-feature';
 exports.EMAIL_ADDRESS_REGEX = /^[a-zA-Z0-9_+&*-]+(?:\.[a-zA-Z0-9_+&*-]+)*@(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,7}$/;
 exports.URL_REGEX = /^(https?\:)\/\/(([^@\s:]+):?([^@\s]*)@)?(([^:\/?#]*)(?:\:([0-9]+))?)([\/]{0,1}[^?#]*)(\?[^#]*|)(#.*|)$/;
-exports.CORE_MODULE_VERSION = 'JS Core 0.20.0';
+exports.CORE_MODULE_VERSION = 'JS Core 0.20.1';

package/lib/cjs/utils/utils.js

@@ -36,7 +36,7 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
     }
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.telemetryConfigReplacer = exports.algoToCryptoString = exports.algoToSubtleCryptoString = exports.sleep = exports.getPropertyFromObject = exports.rejectOnTimeout = exports.transferExistingProperties = exports.isRouteMatch = exports.isRouteInPatterns = exports.removeSensitiveHeaders = exports.removeSensitiveFields = exports.getExtension = exports.getAuthorizationHeader = exports.getCollectorDomain = exports.getScoreApiDomain = exports.isEmailAddress = exports.isValidUuid = exports.isValidEnumValue = void 0;
+exports.telemetryConfigReplacer = exports.algoToCryptoString = exports.algoToSubtleCryptoString = exports.sleep = exports.getPropertyFromObject = exports.rejectOnTimeout = exports.transferExistingProperties = exports.isRouteMatch = exports.isRouteInPatterns = exports.removeSensitiveHeaders = exports.redactSensitiveFields = exports.getExtension = exports.getAuthorizationHeader = exports.getCollectorDomain = exports.getScoreApiDomain = exports.isEmailAddress = exports.isValidUuid = exports.isValidEnumValue = void 0;
 var http_1 = require("../http");
 var error_1 = require("./error");
 var constants_1 = require("./constants");
@@ -77,14 +77,22 @@ var getExtension = function (route) {
     return endOfPath.substring(extensionIndex);
 };
 exports.getExtension = getExtension;
-var removeSensitiveFields = function (object, sensitiveFields) {
+var redactSensitiveFields = function (object, sensitiveFields) {
+    var NUMBER_OF_TRAILING_CHARS_TO_EXPOSE = 5;
+    var SENSITIVE_VALUE_MINIMUM_LENGTH_TO_EXPOSE_TRAILING_CHARS = NUMBER_OF_TRAILING_CHARS_TO_EXPOSE * 10;
     var newObj = Object.assign({}, object);
     sensitiveFields.forEach(function (fieldName) {
-        delete newObj[fieldName];
+        var sensitiveValue = object[fieldName];
+        if (!sensitiveValue) {
+            return;
+        }
+        var trailingCharsExposed = sensitiveValue.length >= SENSITIVE_VALUE_MINIMUM_LENGTH_TO_EXPOSE_TRAILING_CHARS;
+        var trailingChars = sensitiveValue.substring(sensitiveValue.length - (trailingCharsExposed ? NUMBER_OF_TRAILING_CHARS_TO_EXPOSE : 0));
+        newObj[fieldName] = "***REDACTED***".concat(trailingChars);
     });
     return newObj;
 };
-exports.removeSensitiveFields = removeSensitiveFields;
+exports.redactSensitiveFields = redactSensitiveFields;
 var removeSensitiveHeaders = function (headers, sensitiveHeaderNames) {
     var ret = (0, http_1.toMutableHeaders)(headers);
     sensitiveHeaderNames.forEach(function (name) {
@@ -101,7 +109,7 @@ var isRouteMatch = function (route, pattern) {
     if (!route || !pattern) {
         return false;
     }
-    if (pattern instanceof RegExp && pattern.test(route)) {
+    if (pattern instanceof RegExp && !!route.match(pattern)) {
         return true;
     }
     if (typeof pattern === 'string' && route.startsWith(pattern)) {

package/lib/esm/graphql/DefaultGraphQLParser.js

@@ -123,7 +123,7 @@ export class DefaultGraphQLParser {
     }
     getOperationName(operationNameToTypeMap, operation) {
         return (operation.operationName ||
-            (Object.keys(operationNameToTypeMap).length === 1 ? Object.keys(operationNameToTypeMap)[0] : undefined));
+            (Object.keys(operationNameToTypeMap).length === 1 ? Object.keys(operationNameToTypeMap)?.[0] : undefined));
     }
     async getQueryKeywords(query, context) {
         if (this.config.extractGraphQLKeywords && typeof this.config.extractGraphQLKeywords === 'function') {
@@ -173,7 +173,10 @@ export class DefaultGraphQLParser {
         return (this.config.sensitiveGraphqlOperationTypes.some((type) => type === operationType) ||
             this.config.sensitiveGraphqlOperationNames.some((name) => {
                 const pattern = this.toGlobalRegExp(name);
-                return pattern.test(operationName) || keywords?.some((kw) => pattern.test(kw));
+                if (!pattern) {
+                    return false;
+                }
+                return !!operationName?.match(pattern) || keywords?.some((kw) => !!kw.match(pattern));
             }));
     }
     extractGraphQLVariableNames(variables) {

package/lib/esm/products/credential_intelligence/endpoint/login_successful/BodyLoginSuccessfulParser.js

@@ -5,6 +5,6 @@ export class BodyLoginSuccessfulParser {
     }
     async isLoginSuccessful(response) {
         // TODO: Possibly add IBody methods to IOutgoingResponse interface?
-        return this.bodyRegex.test(response.body);
+        return !!response.body?.match?.(this.bodyRegex);
     }
 }

package/lib/esm/products/credential_intelligence/endpoint/matcher/RegexPathEndpointMatcher.js

@@ -6,6 +6,6 @@ export class RegexPathEndpointMatcher {
         this.method = method;
     }
     matches({ method, url }) {
-        return method === this.method && this.pathnameRegex.test(url.pathname);
+        return method === this.method && !!url.pathname.match(this.pathnameRegex);
     }
 }

package/lib/esm/telemetry/DefaultTelemetry.js

@@ -1,6 +1,6 @@
 import { AUTHORIZATION_HEADER_NAME, CONTENT_TYPE_HEADER_NAME, ContentType, HttpMethod, OutgoingRequestImpl, } from '../http';
 import { ActivityType } from '../activities';
-import { getAuthorizationHeader, removeSensitiveFields, transferExistingProperties, DefaultTimestampHmacHeaderValidator, telemetryConfigReplacer, } from '../utils';
+import { getAuthorizationHeader, transferExistingProperties, DefaultTimestampHmacHeaderValidator, telemetryConfigReplacer, redactSensitiveFields, } from '../utils';
 import { TELEMETRY_ENDPOINT, TELEMETRY_HEADER_NAME, TELEMETRY_UPDATE_REASON } from './constants';
 export class DefaultTelemetry {
     config;
@@ -65,9 +65,9 @@ export class DefaultTelemetry {
             'px_remote_config_auth_token',
         ];
         const telemetryConfig = {
-            active_config: removeSensitiveFields(this.config.getActiveConfig(), SENSITIVE_CONFIG_FIELDS),
-            static_config: removeSensitiveFields(this.config.getStaticConfig(), SENSITIVE_CONFIG_FIELDS),
-            remote_config: removeSensitiveFields(this.config.getRemoteConfig(), SENSITIVE_CONFIG_FIELDS),
+            active_config: redactSensitiveFields(this.config.getActiveConfig(), SENSITIVE_CONFIG_FIELDS),
+            static_config: redactSensitiveFields(this.config.getStaticConfig(), SENSITIVE_CONFIG_FIELDS),
+            remote_config: redactSensitiveFields(this.config.getRemoteConfig(), SENSITIVE_CONFIG_FIELDS),
         };
         const activity = {
             type: ActivityType.ENFORCER_TELEMETRY,

package/lib/esm/utils/constants.js

@@ -10,4 +10,4 @@ export const PUSH_DATA_HMAC_HEADER_NAME = 'x-px-pushdata';
 export const PUSH_DATA_FEATURE_HEADER_NAME = 'x-px-feature';
 export const EMAIL_ADDRESS_REGEX = /^[a-zA-Z0-9_+&*-]+(?:\.[a-zA-Z0-9_+&*-]+)*@(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,7}$/;
 export const URL_REGEX = /^(https?\:)\/\/(([^@\s:]+):?([^@\s]*)@)?(([^:\/?#]*)(?:\:([0-9]+))?)([\/]{0,1}[^?#]*)(\?[^#]*|)(#.*|)$/;
-export const CORE_MODULE_VERSION = 'JS Core 0.20.0';
+export const CORE_MODULE_VERSION = 'JS Core 0.20.1';

package/lib/esm/utils/utils.js

@@ -31,10 +31,18 @@ export const getExtension = (route) => {
     }
     return endOfPath.substring(extensionIndex);
 };
-export const removeSensitiveFields = (object, sensitiveFields) => {
+export const redactSensitiveFields = (object, sensitiveFields) => {
+    const NUMBER_OF_TRAILING_CHARS_TO_EXPOSE = 5;
+    const SENSITIVE_VALUE_MINIMUM_LENGTH_TO_EXPOSE_TRAILING_CHARS = NUMBER_OF_TRAILING_CHARS_TO_EXPOSE * 10;
     const newObj = Object.assign({}, object);
     sensitiveFields.forEach((fieldName) => {
-        delete newObj[fieldName];
+        const sensitiveValue = object[fieldName];
+        if (!sensitiveValue) {
+            return;
+        }
+        const trailingCharsExposed = sensitiveValue.length >= SENSITIVE_VALUE_MINIMUM_LENGTH_TO_EXPOSE_TRAILING_CHARS;
+        const trailingChars = sensitiveValue.substring(sensitiveValue.length - (trailingCharsExposed ? NUMBER_OF_TRAILING_CHARS_TO_EXPOSE : 0));
+        newObj[fieldName] = `***REDACTED***${trailingChars}`;
     });
     return newObj;
 };
@@ -52,7 +60,7 @@ export const isRouteMatch = (route, pattern) => {
     if (!route || !pattern) {
         return false;
     }
-    if (pattern instanceof RegExp && pattern.test(route)) {
+    if (pattern instanceof RegExp && !!route.match(pattern)) {
         return true;
     }
     if (typeof pattern === 'string' && route.startsWith(pattern)) {

package/lib/types/utils/constants.d.ts

@@ -10,4 +10,4 @@ export declare const PUSH_DATA_HMAC_HEADER_NAME = "x-px-pushdata";
 export declare const PUSH_DATA_FEATURE_HEADER_NAME = "x-px-feature";
 export declare const EMAIL_ADDRESS_REGEX: RegExp;
 export declare const URL_REGEX: RegExp;
-export declare const CORE_MODULE_VERSION = "JS Core 0.20.0";
+export declare const CORE_MODULE_VERSION = "JS Core 0.20.1";

package/lib/types/utils/utils.d.ts

@@ -7,7 +7,7 @@ export declare const getScoreApiDomain: (appId: string) => string;
 export declare const getCollectorDomain: (appId: string) => string;
 export declare const getAuthorizationHeader: (authToken: string) => string;
 export declare const getExtension: (route: string) => string;
-export declare const removeSensitiveFields: <T extends Record<string, any>>(object: T, sensitiveFields: (keyof T)[]) => T;
+export declare const redactSensitiveFields: <T extends Record<string, any>>(object: T, sensitiveFields: (keyof T)[]) => T;
 export declare const removeSensitiveHeaders: (headers: ReadonlyHeaders, sensitiveHeaderNames: string[]) => Record<string, string[]>;
 export declare const isRouteInPatterns: (route: string, patterns: Array<string | RegExp>) => boolean;
 export declare const isRouteMatch: (route: string, pattern: string | RegExp) => boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "perimeterx-js-core",
-  "version": "0.20.0",
+  "version": "0.20.1",
   "description": "",
   "type": "module",
   "typesVersions": {