perimeterx-js-core 0.23.2 → 0.23.3

package/lib/cjs/graphql/DefaultGraphQLParser.js

@@ -49,7 +49,7 @@ var DefaultGraphQLParser = /** @class */ (function () {
     DefaultGraphQLParser.prototype.isGraphQLRequest = function (_a) {
         var requestData = _a.requestData;
         return (requestData.method === http_1.HttpMethod.POST &&
-            (0, utils_1.isRouteInPatterns)(requestData.url.pathname, this.config.graphqlRoutes));
+            (0, utils_1.isStringInPatterns)(requestData.url.pathname, this.config.graphqlRoutes));
     };
     DefaultGraphQLParser.prototype.parseGraphQLRequest = function (context) {
         return __awaiter(this, void 0, void 0, function () {

package/lib/cjs/monitored_request/MonitoredRequestUtils.js

@@ -74,10 +74,10 @@ var MonitoredRequestUtils;
         });
     }); };
     MonitoredRequestUtils.isMonitoredRoute = function (url, isMonitoredRoute) {
-        return (0, utils_1.isRouteInPatterns)(url.pathname, isMonitoredRoute);
+        return (0, utils_1.isStringInPatterns)(url.pathname, isMonitoredRoute);
     };
     MonitoredRequestUtils.isEnforcedRoute = function (url, enforcedRoutes) {
-        return (0, utils_1.isRouteInPatterns)(url.pathname, enforcedRoutes);
+        return (0, utils_1.isStringInPatterns)(url.pathname, enforcedRoutes);
     };
     MonitoredRequestUtils.invokeCustomIsEnforcedRequest = function (config, context) { return __awaiter(_this, void 0, void 0, function () {
         var err_1;

package/lib/cjs/products/bot_defender/filter/DefaultBotDefenderFilter.js

@@ -109,10 +109,10 @@ var DefaultBotDefenderFilter = /** @class */ (function () {
         return this.config.filteredIps.some(function (range) { return _this.ipRangeChecker.isIpInRange(ip, range); });
     };
     DefaultBotDefenderFilter.prototype.shouldFilterByRoute = function (route) {
-        return (0, utils_1.isRouteInPatterns)(route, this.config.filteredRoutes);
+        return (0, utils_1.isStringInPatterns)(route, this.config.filteredRoutes);
     };
     DefaultBotDefenderFilter.prototype.shouldFilterByUserAgent = function (userAgent) {
-        return this.config.filteredUserAgents.includes(userAgent);
+        return (0, utils_1.isStringInPatterns)(userAgent, this.config.filteredUserAgents);
     };
     DefaultBotDefenderFilter.prototype.shouldFilterByCustomFunction = function (context) {
         return __awaiter(this, void 0, void 0, function () {

package/lib/cjs/sensitive_request/SensitiveRequestUtils.js

@@ -58,7 +58,7 @@ var SensitiveRequestUtils;
         });
     }); };
     SensitiveRequestUtils.isSensitiveRoute = function (url, sensitiveRoutes) {
-        return (0, utils_1.isRouteInPatterns)(url.pathname, sensitiveRoutes);
+        return (0, utils_1.isStringInPatterns)(url.pathname, sensitiveRoutes);
     };
     SensitiveRequestUtils.isSensitiveGraphqlOperation = function (graphQLData) {
         return !!(graphQLData === null || graphQLData === void 0 ? void 0 : graphQLData.some(function (operation) { return operation.sensitive; }));

package/lib/cjs/utils/constants.js

@@ -12,6 +12,6 @@ exports.X_PX_BYPASS_REASON_HEADER_NAME = 'x-px-bypass-reason';
 exports.PUSH_DATA_HMAC_HEADER_NAME = 'x-px-pushdata';
 exports.PUSH_DATA_FEATURE_HEADER_NAME = 'x-px-feature';
 exports.EMAIL_ADDRESS_REGEX = /^[a-zA-Z0-9_+&*-]+(?:\.[a-zA-Z0-9_+&*-]+)*@(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,7}$/;
-exports.URL_REGEX = /^(https?\:)\/\/(([^@\s:]+):?([^@\s]*)@)?(([^:\/?#]*)(?:\:([0-9]+))?)([\/]{0,1}[^?#]*)(\?[^#]*|)(#.*|)$/;
+exports.URL_REGEX = /^(https?:)\/\/(([^@\s:\/]+):?([^@\s\/]*)@)?(([^:\/?#]*)(?:\:([0-9]+))?)(\/?[^?#]*)(\?[^#]*|)(#.*|)$/;
 exports.REGEX_STRUCTURE = /^\/(.+?)\/([gimsuyvd]*)$/;
-exports.CORE_MODULE_VERSION = 'JS Core 0.23.2';
+exports.CORE_MODULE_VERSION = 'JS Core 0.23.3';

package/lib/cjs/utils/utils.js

@@ -36,7 +36,7 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
     }
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isNullOrUndefined = exports.isValidTokenVersion = exports.telemetryConfigReplacer = exports.convertRegexStringToRegex = exports.algoToCryptoString = exports.algoToSubtleCryptoString = exports.sleep = exports.getPropertyFromObject = exports.rejectOnTimeout = exports.transferExistingProperties = exports.isRouteMatch = exports.isRouteInPatterns = exports.removeSensitiveHeaders = exports.redactSensitiveFields = exports.getExtension = exports.getAuthorizationHeader = exports.getCollectorDomain = exports.getScoreApiDomain = exports.isEmailAddress = exports.isValidUuid = exports.isValidEnumValue = void 0;
+exports.isNullOrUndefined = exports.isValidTokenVersion = exports.telemetryConfigReplacer = exports.convertRegexStringToRegex = exports.algoToCryptoString = exports.algoToSubtleCryptoString = exports.sleep = exports.getPropertyFromObject = exports.rejectOnTimeout = exports.transferExistingProperties = exports.isStringMatch = exports.isStringInPatterns = exports.removeSensitiveHeaders = exports.redactSensitiveFields = exports.getExtension = exports.getAuthorizationHeader = exports.getCollectorDomain = exports.getScoreApiDomain = exports.isEmailAddress = exports.isValidUuid = exports.isValidEnumValue = void 0;
 var http_1 = require("../http");
 var error_1 = require("./error");
 var constants_1 = require("./constants");
@@ -80,21 +80,37 @@ var getExtension = function (route) {
 };
 exports.getExtension = getExtension;
 var redactSensitiveFields = function (object, sensitiveFields) {
-    var NUMBER_OF_TRAILING_CHARS_TO_EXPOSE = 5;
-    var SENSITIVE_VALUE_MINIMUM_LENGTH_TO_EXPOSE_TRAILING_CHARS = NUMBER_OF_TRAILING_CHARS_TO_EXPOSE * 10;
     var newObj = Object.assign({}, object);
     sensitiveFields.forEach(function (fieldName) {
         var sensitiveValue = object[fieldName];
         if (!sensitiveValue) {
             return;
         }
-        var trailingCharsExposed = sensitiveValue.length >= SENSITIVE_VALUE_MINIMUM_LENGTH_TO_EXPOSE_TRAILING_CHARS;
-        var trailingChars = sensitiveValue.substring(sensitiveValue.length - (trailingCharsExposed ? NUMBER_OF_TRAILING_CHARS_TO_EXPOSE : 0));
-        newObj[fieldName] = "***REDACTED***".concat(trailingChars);
+        newObj[fieldName] = redactUnknownValue(sensitiveValue);
     });
     return newObj;
 };
 exports.redactSensitiveFields = redactSensitiveFields;
+var redactUnknownValue = function (value) {
+    switch (typeof value) {
+        case 'string':
+            return redactSensitiveString(value);
+        case 'object':
+            if (Array.isArray(value)) {
+                return value.flatMap(redactUnknownValue).filter(function (v) { return !(0, exports.isNullOrUndefined)(v); });
+            }
+            return null;
+        default:
+            return null;
+    }
+};
+var redactSensitiveString = function (sensitiveValue) {
+    var NUMBER_OF_TRAILING_CHARS_TO_EXPOSE = 5;
+    var SENSITIVE_VALUE_MINIMUM_LENGTH_TO_EXPOSE_TRAILING_CHARS = NUMBER_OF_TRAILING_CHARS_TO_EXPOSE * 10;
+    var trailingCharsExposed = sensitiveValue.length >= SENSITIVE_VALUE_MINIMUM_LENGTH_TO_EXPOSE_TRAILING_CHARS;
+    var trailingChars = sensitiveValue.substring(sensitiveValue.length - (trailingCharsExposed ? NUMBER_OF_TRAILING_CHARS_TO_EXPOSE : 0));
+    return "***REDACTED***".concat(trailingChars);
+};
 var removeSensitiveHeaders = function (headers, sensitiveHeaderNames) {
     var ret = (0, http_1.toMutableHeaders)(headers);
     sensitiveHeaderNames.forEach(function (name) {
@@ -103,23 +119,23 @@ var removeSensitiveHeaders = function (headers, sensitiveHeaderNames) {
     return ret;
 };
 exports.removeSensitiveHeaders = removeSensitiveHeaders;
-var isRouteInPatterns = function (route, patterns) {
-    return patterns.some(function (pattern) { return (0, exports.isRouteMatch)(route, pattern); });
+var isStringInPatterns = function (str, patterns) {
+    return patterns.some(function (pattern) { return (0, exports.isStringMatch)(str, pattern); });
 };
-exports.isRouteInPatterns = isRouteInPatterns;
-var isRouteMatch = function (route, pattern) {
-    if (!route || !pattern) {
+exports.isStringInPatterns = isStringInPatterns;
+var isStringMatch = function (str, pattern) {
+    if (!str || !pattern) {
         return false;
     }
-    if (pattern instanceof RegExp && !!route.match(pattern)) {
+    if (pattern instanceof RegExp && !!str.match(pattern)) {
         return true;
     }
-    if (typeof pattern === 'string' && route.startsWith(pattern)) {
+    if (typeof pattern === 'string' && str.startsWith(pattern)) {
         return true;
     }
     return false;
 };
-exports.isRouteMatch = isRouteMatch;
+exports.isStringMatch = isStringMatch;
 /**
  * @deprecated this method is not typesafe. Copy the fields manually instead,
  *             unsafe - ignores compilerOptions.strictNullChecks

package/lib/esm/graphql/DefaultGraphQLParser.js

@@ -1,4 +1,4 @@
-import { isNullOrUndefined, isRouteInPatterns } from '../utils';
+import { isNullOrUndefined, isStringInPatterns } from '../utils';
 import { HttpMethod } from '../http';
 import { GraphQLOperationType } from './model';
 export class DefaultGraphQLParser {
@@ -12,7 +12,7 @@ export class DefaultGraphQLParser {
     }
     isGraphQLRequest({ requestData }) {
         return (requestData.method === HttpMethod.POST &&
-            isRouteInPatterns(requestData.url.pathname, this.config.graphqlRoutes));
+            isStringInPatterns(requestData.url.pathname, this.config.graphqlRoutes));
     }
     async parseGraphQLRequest(context) {
         try {

package/lib/esm/monitored_request/MonitoredRequestUtils.js

@@ -1,4 +1,4 @@
-import { BYPASS_MONITOR_HEADER_VALUE, isRouteInPatterns, ModuleMode } from '../utils';
+import { BYPASS_MONITOR_HEADER_VALUE, isStringInPatterns, ModuleMode } from '../utils';
 export var MonitoredRequestUtils;
 (function (MonitoredRequestUtils) {
     MonitoredRequestUtils.isMonitoredRequest = async (config, context) => {
@@ -10,10 +10,10 @@ export var MonitoredRequestUtils;
         return (monitorMode || monitoredRoute) && !MonitoredRequestUtils.isAllowedToBypassMonitor(config.bypassMonitorHeader, request);
     };
     MonitoredRequestUtils.isMonitoredRoute = (url, isMonitoredRoute) => {
-        return isRouteInPatterns(url.pathname, isMonitoredRoute);
+        return isStringInPatterns(url.pathname, isMonitoredRoute);
     };
     MonitoredRequestUtils.isEnforcedRoute = (url, enforcedRoutes) => {
-        return isRouteInPatterns(url.pathname, enforcedRoutes);
+        return isStringInPatterns(url.pathname, enforcedRoutes);
     };
     MonitoredRequestUtils.invokeCustomIsEnforcedRequest = async (config, context) => {
         if (config.customIsEnforcedRequest && typeof config.customIsEnforcedRequest === 'function') {

package/lib/esm/products/bot_defender/filter/DefaultBotDefenderFilter.js

@@ -1,6 +1,6 @@
 import { HttpMethod } from '../../../http';
 import { FilterReason } from '../../../filter';
-import { getExtension, isRouteInPatterns } from '../../../utils';
+import { getExtension, isStringInPatterns } from '../../../utils';
 export class DefaultBotDefenderFilter {
     config;
     ipRangeChecker;
@@ -52,10 +52,10 @@ export class DefaultBotDefenderFilter {
         return this.config.filteredIps.some((range) => this.ipRangeChecker.isIpInRange(ip, range));
     }
     shouldFilterByRoute(route) {
-        return isRouteInPatterns(route, this.config.filteredRoutes);
+        return isStringInPatterns(route, this.config.filteredRoutes);
     }
     shouldFilterByUserAgent(userAgent) {
-        return this.config.filteredUserAgents.includes(userAgent);
+        return isStringInPatterns(userAgent, this.config.filteredUserAgents);
     }
     async shouldFilterByCustomFunction(context) {
         if (this.config.customIsFilteredRequest && typeof this.config.customIsFilteredRequest === 'function') {

package/lib/esm/sensitive_request/SensitiveRequestUtils.js

@@ -1,4 +1,4 @@
-import { isRouteInPatterns } from '../utils';
+import { isStringInPatterns } from '../utils';
 export var SensitiveRequestUtils;
 (function (SensitiveRequestUtils) {
     SensitiveRequestUtils.isSensitiveRequest = async (config, context) => {
@@ -7,7 +7,7 @@ export var SensitiveRequestUtils;
             (await SensitiveRequestUtils.invokeCustomIsSensitiveRequest(config, context)));
     };
     SensitiveRequestUtils.isSensitiveRoute = (url, sensitiveRoutes) => {
-        return isRouteInPatterns(url.pathname, sensitiveRoutes);
+        return isStringInPatterns(url.pathname, sensitiveRoutes);
     };
     SensitiveRequestUtils.isSensitiveGraphqlOperation = (graphQLData) => {
         return !!graphQLData?.some((operation) => operation.sensitive);

package/lib/esm/utils/constants.js

@@ -9,6 +9,6 @@ export const X_PX_BYPASS_REASON_HEADER_NAME = 'x-px-bypass-reason';
 export const PUSH_DATA_HMAC_HEADER_NAME = 'x-px-pushdata';
 export const PUSH_DATA_FEATURE_HEADER_NAME = 'x-px-feature';
 export const EMAIL_ADDRESS_REGEX = /^[a-zA-Z0-9_+&*-]+(?:\.[a-zA-Z0-9_+&*-]+)*@(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,7}$/;
-export const URL_REGEX = /^(https?\:)\/\/(([^@\s:]+):?([^@\s]*)@)?(([^:\/?#]*)(?:\:([0-9]+))?)([\/]{0,1}[^?#]*)(\?[^#]*|)(#.*|)$/;
+export const URL_REGEX = /^(https?:)\/\/(([^@\s:\/]+):?([^@\s\/]*)@)?(([^:\/?#]*)(?:\:([0-9]+))?)(\/?[^?#]*)(\?[^#]*|)(#.*|)$/;
 export const REGEX_STRUCTURE = /^\/(.+?)\/([gimsuyvd]*)$/;
-export const CORE_MODULE_VERSION = 'JS Core 0.23.2';
+export const CORE_MODULE_VERSION = 'JS Core 0.23.3';

package/lib/esm/utils/utils.js

@@ -33,20 +33,36 @@ export const getExtension = (route) => {
     return endOfPath.substring(extensionIndex);
 };
 export const redactSensitiveFields = (object, sensitiveFields) => {
-    const NUMBER_OF_TRAILING_CHARS_TO_EXPOSE = 5;
-    const SENSITIVE_VALUE_MINIMUM_LENGTH_TO_EXPOSE_TRAILING_CHARS = NUMBER_OF_TRAILING_CHARS_TO_EXPOSE * 10;
     const newObj = Object.assign({}, object);
     sensitiveFields.forEach((fieldName) => {
         const sensitiveValue = object[fieldName];
         if (!sensitiveValue) {
             return;
         }
-        const trailingCharsExposed = sensitiveValue.length >= SENSITIVE_VALUE_MINIMUM_LENGTH_TO_EXPOSE_TRAILING_CHARS;
-        const trailingChars = sensitiveValue.substring(sensitiveValue.length - (trailingCharsExposed ? NUMBER_OF_TRAILING_CHARS_TO_EXPOSE : 0));
-        newObj[fieldName] = `***REDACTED***${trailingChars}`;
+        newObj[fieldName] = redactUnknownValue(sensitiveValue);
     });
     return newObj;
 };
+const redactUnknownValue = (value) => {
+    switch (typeof value) {
+        case 'string':
+            return redactSensitiveString(value);
+        case 'object':
+            if (Array.isArray(value)) {
+                return value.flatMap(redactUnknownValue).filter((v) => !isNullOrUndefined(v));
+            }
+            return null;
+        default:
+            return null;
+    }
+};
+const redactSensitiveString = (sensitiveValue) => {
+    const NUMBER_OF_TRAILING_CHARS_TO_EXPOSE = 5;
+    const SENSITIVE_VALUE_MINIMUM_LENGTH_TO_EXPOSE_TRAILING_CHARS = NUMBER_OF_TRAILING_CHARS_TO_EXPOSE * 10;
+    const trailingCharsExposed = sensitiveValue.length >= SENSITIVE_VALUE_MINIMUM_LENGTH_TO_EXPOSE_TRAILING_CHARS;
+    const trailingChars = sensitiveValue.substring(sensitiveValue.length - (trailingCharsExposed ? NUMBER_OF_TRAILING_CHARS_TO_EXPOSE : 0));
+    return `***REDACTED***${trailingChars}`;
+};
 export const removeSensitiveHeaders = (headers, sensitiveHeaderNames) => {
     const ret = toMutableHeaders(headers);
     sensitiveHeaderNames.forEach((name) => {
@@ -54,17 +70,17 @@ export const removeSensitiveHeaders = (headers, sensitiveHeaderNames) => {
     });
     return ret;
 };
-export const isRouteInPatterns = (route, patterns) => {
-    return patterns.some((pattern) => isRouteMatch(route, pattern));
+export const isStringInPatterns = (str, patterns) => {
+    return patterns.some((pattern) => isStringMatch(str, pattern));
 };
-export const isRouteMatch = (route, pattern) => {
-    if (!route || !pattern) {
+export const isStringMatch = (str, pattern) => {
+    if (!str || !pattern) {
         return false;
     }
-    if (pattern instanceof RegExp && !!route.match(pattern)) {
+    if (pattern instanceof RegExp && !!str.match(pattern)) {
         return true;
     }
-    if (typeof pattern === 'string' && route.startsWith(pattern)) {
+    if (typeof pattern === 'string' && str.startsWith(pattern)) {
         return true;
     }
     return false;

package/lib/types/config/ConfigurationBase.d.ts

@@ -43,7 +43,7 @@ export declare abstract class ConfigurationBase<Req, Res, Added, Removed extends
     get filteredHttpMethods(): string[];
     get filteredIps(): string[];
     get filteredRoutes(): Array<string | RegExp>;
-    get filteredUserAgents(): string[];
+    get filteredUserAgents(): Array<string | RegExp>;
     get firstPartyEnabled(): boolean;
     get customIsFilteredRequest(): CustomRequestFunction<Req> | null;
     get customFirstPartyPrefix(): string;

package/lib/types/config/IConfiguration.d.ts

@@ -48,7 +48,7 @@ export interface IConfiguration<Req, Res, Added, Removed> {
     /**
      * An array of agents that should not go through the enforcer flow.
      */
-    readonly filteredUserAgents: string[];
+    readonly filteredUserAgents: Array<string | RegExp>;
     /**
      * An array of regular expressions or prefixes of routes that should not go through the enforcer flow.
      */

package/lib/types/config/params/CoreConfigurationParams.d.ts

@@ -74,7 +74,7 @@ export type CommonConfigurationParams<Req, Res, Added, Removed> = TokenV3Configu
     px_filter_by_http_method?: string[];
     px_filter_by_ip?: string[];
     px_filter_by_route?: Array<string | RegExp>;
-    px_filter_by_user_agent?: string[];
+    px_filter_by_user_agent?: Array<string | RegExp>;
     px_css_ref?: string;
     px_js_ref?: string;
     px_custom_cookie_header?: string;

package/lib/types/utils/constants.d.ts

@@ -11,4 +11,4 @@ export declare const PUSH_DATA_FEATURE_HEADER_NAME = "x-px-feature";
 export declare const EMAIL_ADDRESS_REGEX: RegExp;
 export declare const URL_REGEX: RegExp;
 export declare const REGEX_STRUCTURE: RegExp;
-export declare const CORE_MODULE_VERSION = "JS Core 0.23.2";
+export declare const CORE_MODULE_VERSION = "JS Core 0.23.3";

package/lib/types/utils/utils.d.ts

@@ -11,8 +11,8 @@ export declare const getAuthorizationHeader: (authToken: string) => string;
 export declare const getExtension: (route: string) => string;
 export declare const redactSensitiveFields: <T extends Record<string, any>>(object: T, sensitiveFields: Array<keyof T | string>) => T;
 export declare const removeSensitiveHeaders: (headers: ReadonlyHeaders, sensitiveHeaderNames: string[]) => Record<string, string[]>;
-export declare const isRouteInPatterns: (route: string, patterns: Array<string | RegExp>) => boolean;
-export declare const isRouteMatch: (route: string, pattern: string | RegExp) => boolean;
+export declare const isStringInPatterns: (str: string, patterns: Array<string | RegExp>) => boolean;
+export declare const isStringMatch: (str: string, pattern: string | RegExp) => boolean;
 /**
  * @deprecated this method is not typesafe. Copy the fields manually instead,
  *             unsafe - ignores compilerOptions.strictNullChecks

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "perimeterx-js-core",
-  "version": "0.23.2",
+  "version": "0.23.3",
   "description": "",
   "type": "module",
   "typesVersions": {