npm - perimeterx-js-core - Versions diffs - 0.7.1 → 0.9.0 - Mend

perimeterx-js-core 0.7.1 → 0.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1178) hide show

package/lib/cjs/products/bot_defender/block/index.js ADDED Viewed

@@ -0,0 +1,21 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./model"), exports);
+__exportStar(require("./captcha"), exports);
+__exportStar(require("./templates"), exports);
+__exportStar(require("./utils"), exports);
+__exportStar(require("./DefaultBotDefenderBlocker"), exports);

package/lib/cjs/products/bot_defender/block/model/BlockData.js ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ "use strict";
2	+ Object.defineProperty(exports, "__esModule", { value: true });

package/lib/cjs/products/bot_defender/block/model/JsonBlockPayload.js ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ "use strict";
2	+ Object.defineProperty(exports, "__esModule", { value: true });

package/lib/cjs/products/bot_defender/block/model/MobileBlockPayload.js ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ "use strict";
2	+ Object.defineProperty(exports, "__esModule", { value: true });

package/lib/cjs/products/bot_defender/block/model/index.js ADDED Viewed

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./BlockData"), exports);
+__exportStar(require("./JsonBlockPayload"), exports);
+__exportStar(require("./MobileBlockPayload"), exports);

package/lib/cjs/products/bot_defender/block/templates/captcha_template.js ADDED Viewed

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CAPTCHA_TEMPLATE = void 0;
+exports.CAPTCHA_TEMPLATE = "<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"utf-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n    <meta name=\"description\" content=\"px-captcha\">\n    <title>Access to this page has been denied</title>\n    {{cssRef}}\n</head>\n<body>\n    <script>\n        /* PerimeterX assignments */\n        window._pxVid = '{{vid}}';\n        window._pxUuid = '{{uuid}}';\n        window._pxAppId = '{{appId}}';\n        window._pxMobile = {{isMobile}};\n        window._pxHostUrl = '{{hostUrl}}';\n        window._pxCustomLogo = '{{customLogo}}';\n        window._pxJsClientSrc = '{{jsClientSrc}}';\n        window._pxFirstPartyEnabled = {{firstPartyEnabled}};\n        var pxCaptchaSrc = '{{blockScript}}';\n\n        var script = document.createElement('script');\n        script.src = pxCaptchaSrc;\n        script.onerror = function () {\n            script = document.createElement('script');\n            script.src = '{{altBlockScript}}';\n            script.onerror = window._pxOnError;\n            document.head.appendChild(script);\n        };\n        window._pxOnError = function () {\n            var style = document.createElement('style');\n            style.innerText = '@import url(https://fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap);body{background-color:#fafbfc}.px-captcha-error-container{position:fixed;height:340px;background-color:#fff;font-family:Roboto,sans-serif}.px-captcha-error-header{color:#f0f1f2;font-size:29px;margin:67px 0 33px;font-weight:500;line-height:.83;text-align:center}.px-captcha-error-message{color:#f0f1f2;font-size:18px;margin:0 0 29px;line-height:1.33;text-align:center}.px-captcha-error-button{text-align:center;line-height:48px;width:253px;margin:auto;border-radius:50px;border:solid 1px #f0f1f2;font-size:20px;color:#f0f1f2}.px-captcha-error-wrapper{margin:18px 0 0}div.px-captcha-error{margin:auto;text-align:center;width:400px;height:30px;font-size:12px;background-color:#fcf0f2;color:#ce0e2d}img.px-captcha-error{margin:6px 8px -2px 0}.px-captcha-error-refid{border-top:solid 1px #f0eeee;height:27px;margin:13px 0 0;border-radius:0 0 3px 3px;background-color:#fafbfc;font-size:10px;line-height:2.5;text-align:center;color:#b1b5b8}@media (min-width:620px){.px-captcha-error-container{width:530px;top:50%;left:50%;margin-top:-170px;margin-left:-265px;border-radius:3px;box-shadow:0 2px 9px -1px rgba(0,0,0,.13)}}@media (min-width:481px) and (max-width:620px){.px-captcha-error-container{width:85%;top:50%;left:50%;margin-top:-170px;margin-left:-42.5%;border-radius:3px;box-shadow:0 2px 9px -1px rgba(0,0,0,.13)}}@media (max-width:480px){body{background-color:#fff}.px-captcha-error-header{color:#f0f1f2;font-size:29px;margin:55px 0 33px}.px-captcha-error-container{width:530px;top:50%;left:50%;margin-top:-170px;margin-left:-265px}.px-captcha-error-refid{position:fixed;width:100%;left:0;bottom:0;border-radius:0;font-size:14px;line-height:2}}@media (max-width:390px){div.px-captcha-error{font-size:10px}.px-captcha-error-refid{font-size:11px;line-height:2.5}}';\n            document.head.appendChild(style);\n            var div = document.createElement('div');\n            div.className = 'px-captcha-error-container';\n            div.innerHTML = '<div class=\"px-captcha-error-header\">Before we continue...</div><div class=\"px-captcha-error-message\">Press & Hold to confirm you are<br>a human (and not a bot).</div><div class=\"px-captcha-error-button\">Press & Hold</div><div class=\"px-captcha-error-wrapper\"><div class=\"px-captcha-error\"><img class=\"px-captcha-error\" src=\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABMAAAAQCAMAAADDGrRQAAAABGdBTUEAALGPC/xhBQAAAAFzUkdCAK7OHOkAAABFUExURUdwTNYELOEGONQILd0AONwALtwEL+AAL9MFLfkJSNQGLdMJLdQJLdQGLdQKLtYFLNcELdUGLdcBL9gFL88OLdUFLNEOLglBhT4AAAAXdFJOUwC8CqgNIRgRoAS1dWWuR4RTjzgryZpYblfkcAAAAI9JREFUGNNdj+sWhCAIhAdvqGVa1r7/oy6RZ7eaH3D4ZACBIed9wlOOMtUnSrEmZ6cHa9YAIfsbCkWrdpi/c50Bk2CO9mNLdMAu03wJA3HpEnfpxbyOg6ruyx8JJi6KNstnslp1dbPd9GnqmuYq7mmcv1zjnbQw8cV0xzkqo+fX1zkjUOO7wnrInUTxJiruC3vtBNRoQQn2AAAAAElFTkSuQmCC\">Please check your internet connection' + (window._pxMobile ? '' : ' or disable your ad-blocker') + '.</div></div><div class=\"px-captcha-error-refid\">Reference ID ' + window._pxUuid + '</div>';\n            document.body.appendChild(div);\n            if (window._pxMobile) {\n                setTimeout(function() {\n                    location.href = '/px/captcha_close?status=-1';\n                }, 5000);\n            }\n        };\n        document.head.appendChild(script);\n    </script>\n    {{jsRef}}\n</body>\n</html>\n";

package/lib/cjs/products/bot_defender/block/templates/index.js ADDED Viewed

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./captcha_template"), exports);
+__exportStar(require("./rate_limit_template"), exports);

package/lib/cjs/products/bot_defender/block/templates/rate_limit_template.js ADDED Viewed

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RATE_LIMIT_TEMPLATE = void 0;
+exports.RATE_LIMIT_TEMPLATE = "<html>\n<head>\n    <title>Too Many Requests</title>\n</head>\n<body>\n    <h1>Too Many Requests</h1>\n    <p>Reached maximum requests limitation, try again soon.</p>\n</body>\n</html>\n";

package/lib/cjs/products/bot_defender/block/utils.js ADDED Viewed

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createBlockData = exports.renderHtml = void 0;
+var utils_1 = require("../../../utils");
+var first_party_1 = require("../first_party");
+var renderHtml = function (htmlTemplate, blockData) {
+    if (!blockData) {
+        return htmlTemplate;
+    }
+    Object.entries(blockData).forEach(function (_a) {
+        var key = _a[0], value = _a[1];
+        var replace = "{{".concat(key, "}}");
+        var regEx = new RegExp(replace, 'g');
+        htmlTemplate = htmlTemplate.replace(regEx, "".concat(value));
+    });
+    return htmlTemplate;
+};
+exports.renderHtml = renderHtml;
+var createBlockData = function (config, context) {
+    var _a, _b;
+    var captchaScriptSuffix = '/captcha.js';
+    var captchaParams = "?a=".concat(context.blockAction, "&u=").concat(context.uuid, "&v=").concat(context.vid || '', "&m=").concat(context.isMobile ? '1' : '0');
+    var jsClientSrc = "".concat(config.backendClientUrl, "/").concat(config.appId, "/main.min.js");
+    var blockScript = "".concat(config.backendCaptchaUrl, "/").concat(config.appId).concat(captchaScriptSuffix).concat(captchaParams);
+    var hostUrl = config.backendCollectorUrl;
+    if (config.firstPartyEnabled && !context.isMobile) {
+        jsClientSrc = (0, first_party_1.getMostCustomizedFirstPartyPath)(config, first_party_1.FirstPartySuffix.SENSOR);
+        blockScript = "".concat((0, first_party_1.getMostCustomizedFirstPartyPath)(config, first_party_1.FirstPartySuffix.CAPTCHA)).concat(config.customFirstPartyCaptchaEndpoint ? captchaParams : "".concat(captchaScriptSuffix).concat(captchaParams));
+        hostUrl = (0, first_party_1.getMostCustomizedFirstPartyPath)(config, first_party_1.FirstPartySuffix.XHR);
+    }
+    var cssRef = config.cssRef ? "<link rel=\"stylesheet\" type=\"text/css\" href=\"".concat(config.cssRef, "\" />") : '';
+    var jsRef = config.jsRef ? "<script src=\"".concat(config.jsRef, "\"></script>") : '';
+    var altBlockScript = "".concat(config.altBackendCaptchaUrl, "/").concat(config.appId).concat(captchaScriptSuffix).concat(captchaParams);
+    return {
+        appId: config.appId,
+        vid: context.vid || ((_b = (_a = context.requestData) === null || _a === void 0 ? void 0 : _a.cookies) === null || _b === void 0 ? void 0 : _b[utils_1.PXVID_COOKIE_NAME]) || '',
+        uuid: context.uuid || '',
+        isMobile: context.isMobile,
+        customLogo: config.customLogo || '',
+        blockAction: context.blockAction,
+        hostUrl: hostUrl,
+        cssRef: cssRef,
+        jsRef: jsRef,
+        jsClientSrc: jsClientSrc,
+        firstPartyEnabled: config.firstPartyEnabled,
+        blockScript: blockScript,
+        altBlockScript: altBlockScript,
+    };
+};
+exports.createBlockData = createBlockData;

package/lib/cjs/products/bot_defender/filter/DefaultBotDefenderFilter.js ADDED Viewed

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DefaultBotDefenderFilter = void 0;
+var http_1 = require("../../../http");
+var filter_1 = require("../../../filter");
+var utils_1 = require("../../../utils");
+var DefaultBotDefenderFilter = /** @class */ (function () {
+    function DefaultBotDefenderFilter(config, ipRangeChecker) {
+        this.config = config;
+        this.ipRangeChecker = ipRangeChecker;
+    }
+    DefaultBotDefenderFilter.prototype.shouldFilter = function (context) {
+        var requestData = context.requestData;
+        var filterReason = this.getFilterReason(requestData);
+        if (filterReason !== filter_1.FilterReason.NONE) {
+            this.config.logger.debug("filter request due to ".concat(filterReason));
+            return true;
+        }
+        return false;
+    };
+    DefaultBotDefenderFilter.prototype.getFilterReason = function (request) {
+        if (this.shouldFilterByExtension(request)) {
+            return filter_1.FilterReason.EXTENSION;
+        }
+        if (this.shouldFilterByRoute(request.url.pathname)) {
+            return filter_1.FilterReason.ROUTE;
+        }
+        if (this.shouldFilterByHttpMethod(request.method)) {
+            return filter_1.FilterReason.HTTP_METHOD;
+        }
+        if (this.shouldFilterByUserAgent(request.userAgent)) {
+            return filter_1.FilterReason.USER_AGENT;
+        }
+        if (this.shouldFilterByIp(request.ip)) {
+            return filter_1.FilterReason.IP;
+        }
+        return filter_1.FilterReason.NONE;
+    };
+    DefaultBotDefenderFilter.prototype.shouldFilterByExtension = function (requestData) {
+        if (requestData.method !== http_1.HttpMethod.GET && requestData.method !== http_1.HttpMethod.HEAD) {
+            return false;
+        }
+        var ext = (0, utils_1.getExtension)(requestData.url.href);
+        return !!ext && this.config.filteredExtensions.includes(ext);
+    };
+    DefaultBotDefenderFilter.prototype.shouldFilterByHttpMethod = function (method) {
+        return this.config.filteredHttpMethods.some(function (filteredMethod) { return filteredMethod.toUpperCase() === method; });
+    };
+    DefaultBotDefenderFilter.prototype.shouldFilterByIp = function (ip) {
+        var _this = this;
+        return this.config.filteredIps.some(function (range) { return _this.ipRangeChecker.isIpInRange(ip, range); });
+    };
+    DefaultBotDefenderFilter.prototype.shouldFilterByRoute = function (route) {
+        return (0, utils_1.isRouteInPatterns)(route, this.config.filteredRoutes);
+    };
+    DefaultBotDefenderFilter.prototype.shouldFilterByUserAgent = function (userAgent) {
+        return this.config.filteredUserAgents.includes(userAgent);
+    };
+    return DefaultBotDefenderFilter;
+}());
+exports.DefaultBotDefenderFilter = DefaultBotDefenderFilter;

package/lib/cjs/products/bot_defender/filter/index.js ADDED Viewed

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./DefaultBotDefenderFilter"), exports);

package/lib/cjs/products/bot_defender/first_party/DefaultBotDefenderFirstParty.js ADDED Viewed

@@ -0,0 +1,201 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DefaultBotDefenderFirstParty = void 0;
+var utils_1 = require("../../../utils");
+var http_1 = require("../../../http");
+var utils_2 = require("./utils");
+var constants_1 = require("./constants");
+var FirstPartySuffix_1 = require("./FirstPartySuffix");
+var DefaultBotDefenderFirstParty = /** @class */ (function () {
+    function DefaultBotDefenderFirstParty(config) {
+        this.config = config;
+    }
+    DefaultBotDefenderFirstParty.prototype.handleFirstPartyRequest = function (context) {
+        return __awaiter(this, void 0, void 0, function () {
+            var pathname, xhrPrefix, captchaPrefix;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        pathname = context.requestData.url.pathname;
+                        if (!(0, utils_2.getFirstPartySensorScriptPaths)(this.config).includes(pathname)) return [3 /*break*/, 2];
+                        return [4 /*yield*/, this.proxySensorScriptRequest(context)];
+                    case 1: return [2 /*return*/, _a.sent()];
+                    case 2:
+                        xhrPrefix = (0, utils_2.getFirstPartyXhrPathPrefixes)(this.config).find(function (prefix) { return pathname.startsWith(prefix); });
+                        if (!xhrPrefix) return [3 /*break*/, 4];
+                        return [4 /*yield*/, this.proxyXhrRequest(context, xhrPrefix)];
+                    case 3: return [2 /*return*/, _a.sent()];
+                    case 4:
+                        captchaPrefix = (0, utils_2.getFirstPartyCaptchaScriptPathPrefixes)(this.config).find(function (prefix) {
+                            return pathname.startsWith(prefix);
+                        });
+                        if (!captchaPrefix) return [3 /*break*/, 6];
+                        return [4 /*yield*/, this.proxyCaptchaScriptRequest(context)];
+                    case 5: return [2 /*return*/, _a.sent()];
+                    case 6: return [2 /*return*/, null];
+                }
+            });
+        });
+    };
+    DefaultBotDefenderFirstParty.prototype.proxySensorScriptRequest = function (context) {
+        return __awaiter(this, void 0, void 0, function () {
+            var defaultResponse, url, request;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        defaultResponse = new http_1.MinimalResponseImpl(constants_1.DEFAULT_CLIENT_RESPONSE_OPTIONS);
+                        if (!this.config.firstPartyEnabled) {
+                            return [2 /*return*/, { defaultResponse: defaultResponse }];
+                        }
+                        url = this.getThirdPartySensorScriptUrl();
+                        return [4 /*yield*/, this.getOutgoingRequest(url, context)];
+                    case 1:
+                        request = _a.sent();
+                        this.config.logger.debug("proxying first party sensor script ".concat(context.requestData.url.pathname, " to ").concat(url));
+                        return [2 /*return*/, { request: request, defaultResponse: defaultResponse }];
+                }
+            });
+        });
+    };
+    DefaultBotDefenderFirstParty.prototype.proxyXhrRequest = function (context, prefix) {
+        return __awaiter(this, void 0, void 0, function () {
+            var defaultResponse, url, request;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        defaultResponse = DefaultBotDefenderFirstParty.getDefaultXhrResponse(context.requestData.url.pathname);
+                        if (!this.config.firstPartyEnabled) {
+                            return [2 /*return*/, { defaultResponse: defaultResponse }];
+                        }
+                        url = this.getThirdPartyXhrUrl(context, prefix);
+                        return [4 /*yield*/, this.getOutgoingRequest(url, context)];
+                    case 1:
+                        request = _a.sent();
+                        this.config.logger.debug("proxying first party XHR request ".concat(context.requestData.url.pathname, " to ").concat(url));
+                        return [2 /*return*/, { request: request, defaultResponse: defaultResponse }];
+                }
+            });
+        });
+    };
+    DefaultBotDefenderFirstParty.getDefaultXhrResponse = function (path) {
+        var _a = path.endsWith('.gif') ? constants_1.DEFAULT_GIF_RESPONSE : constants_1.DEFAULT_XHR_RESPONSE, content = _a.content, options = _a.options;
+        return new http_1.MinimalResponseImpl({
+            body: content,
+            status: options.status,
+            headers: options.headers,
+        });
+    };
+    DefaultBotDefenderFirstParty.prototype.proxyCaptchaScriptRequest = function (context) {
+        return __awaiter(this, void 0, void 0, function () {
+            var defaultResponse, url, request;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        defaultResponse = new http_1.MinimalResponseImpl(constants_1.DEFAULT_CLIENT_RESPONSE_OPTIONS);
+                        if (!this.config.firstPartyEnabled) {
+                            return [2 /*return*/, { defaultResponse: defaultResponse }];
+                        }
+                        url = this.getThirdPartyCaptchaScriptUrl(context);
+                        return [4 /*yield*/, this.getOutgoingRequest(url, context)];
+                    case 1:
+                        request = _a.sent();
+                        this.config.logger.debug("proxying first party captcha script ".concat(context.requestData.url.pathname, " to ").concat(url));
+                        return [2 /*return*/, { request: request, defaultResponse: defaultResponse }];
+                }
+            });
+        });
+    };
+    DefaultBotDefenderFirstParty.prototype.getOutgoingRequest = function (url, _a) {
+        var requestData = _a.requestData, vid = _a.vid;
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_b) {
+                return [2 /*return*/, new http_1.OutgoingRequestImpl({
+                        url: url,
+                        method: requestData.method,
+                        headers: this.prepareFirstPartyHeaders(url, requestData, vid),
+                        body: requestData.request.body,
+                    })];
+            });
+        });
+    };
+    DefaultBotDefenderFirstParty.prototype.prepareFirstPartyHeaders = function (url, requestData, vid) {
+        var headers = (0, http_1.toMutableHeaders)(requestData.headers);
+        try {
+            headers = (0, utils_1.removeSensitiveHeaders)(headers, this.config.sensitiveHeaders);
+            this.setHostHeader(headers, url);
+            this.setXffHeader(headers, requestData.ip);
+            this.addFirstPartyHeaders(headers, requestData.ip);
+            if (vid) {
+                var newCookies = (headers[http_1.COOKIE_HEADER_NAME] || []).concat(["pxvid=".concat(vid)]);
+                headers[http_1.COOKIE_HEADER_NAME] = [newCookies.join('; ')];
+            }
+        }
+        catch (e) {
+            this.config.logger.error("Caught error preparing first party headers: ".concat(e));
+        }
+        return headers;
+    };
+    DefaultBotDefenderFirstParty.prototype.setHostHeader = function (headers, url) {
+        var host = http_1.URLUtils.parseURL(url).host;
+        headers[http_1.HOST_HEADER_NAME] = [host];
+    };
+    DefaultBotDefenderFirstParty.prototype.setXffHeader = function (headers, ip) {
+        var xffValue = headers[http_1.X_FORWARDED_FOR_HEADER_NAME] || [];
+        headers[http_1.X_FORWARDED_FOR_HEADER_NAME] = xffValue.concat([ip]);
+    };
+    DefaultBotDefenderFirstParty.prototype.addFirstPartyHeaders = function (headers, ip) {
+        headers[constants_1.FIRST_PARTY_HEADER_NAME] = [constants_1.FIRST_PARTY_HEADER_VALUE];
+        headers[constants_1.X_PX_ENFORCER_TRUE_IP_HEADER_NAME] = [ip];
+    };
+    DefaultBotDefenderFirstParty.prototype.getThirdPartySensorScriptUrl = function () {
+        return "".concat(this.config.backendClientUrl, "/").concat(this.config.appId, "/main.min.js");
+    };
+    DefaultBotDefenderFirstParty.prototype.getThirdPartyCaptchaScriptUrl = function (context) {
+        var originalUrl = context.requestData.url;
+        var _a = this.config, appId = _a.appId, backendCaptchaUrl = _a.backendCaptchaUrl;
+        return "".concat(backendCaptchaUrl, "/").concat(appId).concat(FirstPartySuffix_1.FirstPartySuffix.CAPTCHA, ".js").concat(originalUrl.search);
+    };
+    DefaultBotDefenderFirstParty.prototype.getThirdPartyXhrUrl = function (context, prefix) {
+        var originalUrl = context.requestData.url;
+        var backendCollectorUrl = this.config.backendCollectorUrl;
+        return "".concat(backendCollectorUrl).concat(originalUrl.pathname.replace(prefix, '')).concat(originalUrl.search);
+    };
+    return DefaultBotDefenderFirstParty;
+}());
+exports.DefaultBotDefenderFirstParty = DefaultBotDefenderFirstParty;

package/lib/cjs/products/bot_defender/first_party/FirstPartySuffix.js ADDED Viewed

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FirstPartySuffix = void 0;
+var FirstPartySuffix;
+(function (FirstPartySuffix) {
+    FirstPartySuffix["SENSOR"] = "/init.js";
+    FirstPartySuffix["CAPTCHA"] = "/captcha";
+    FirstPartySuffix["XHR"] = "/xhr";
+})(FirstPartySuffix || (exports.FirstPartySuffix = FirstPartySuffix = {}));

package/lib/cjs/products/bot_defender/first_party/constants.js ADDED Viewed

@@ -0,0 +1,33 @@
+"use strict";
+var _a, _b, _c;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_GIF_RESPONSE = exports.DEFAULT_XHR_RESPONSE = exports.DEFAULT_CLIENT_RESPONSE_OPTIONS = exports.FIRST_PARTY_HEADER_VALUE = exports.FIRST_PARTY_HEADER_NAME = exports.X_PX_ENFORCER_TRUE_IP_HEADER_NAME = void 0;
+var http_1 = require("../../../http");
+exports.X_PX_ENFORCER_TRUE_IP_HEADER_NAME = 'x-px-enforcer-true-ip';
+exports.FIRST_PARTY_HEADER_NAME = 'x-px-first-party';
+exports.FIRST_PARTY_HEADER_VALUE = '1';
+exports.DEFAULT_CLIENT_RESPONSE_OPTIONS = {
+    body: '',
+    status: 200,
+    headers: (_a = {},
+        _a[http_1.CONTENT_TYPE_HEADER_NAME] = [http_1.ContentType.APPLICATION_JAVASCRIPT],
+        _a),
+};
+exports.DEFAULT_XHR_RESPONSE = {
+    content: '{}',
+    options: {
+        status: 200,
+        headers: (_b = {},
+            _b[http_1.CONTENT_TYPE_HEADER_NAME] = [http_1.ContentType.APPLICATION_JAVASCRIPT],
+            _b),
+    },
+};
+exports.DEFAULT_GIF_RESPONSE = {
+    content: 'GIF89a\x01\x00\x01\x00\x80\x00\x00ÿÿÿ\x00\x00\x00,\x00\x00\x00\x00\x01\x00\x01\x00\x00\x02\x02D\x01\x00;',
+    options: {
+        status: 200,
+        headers: (_c = {},
+            _c[http_1.CONTENT_TYPE_HEADER_NAME] = [http_1.ContentType.IMAGE_GIF],
+            _c),
+    },
+};

package/lib/cjs/products/bot_defender/first_party/index.js ADDED Viewed

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./DefaultBotDefenderFirstParty"), exports);
+__exportStar(require("./utils"), exports);
+__exportStar(require("./constants"), exports);
+__exportStar(require("./FirstPartySuffix"), exports);

package/lib/cjs/products/bot_defender/first_party/utils.js ADDED Viewed

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.addInitialSlashIfNeeded = exports.getFirstPartyPath = exports.getDefaultFirstPartyPrefix = exports.getFirstPartyXhrPathPrefixes = exports.getFirstPartyCaptchaScriptPathPrefixes = exports.getFirstPartySensorScriptPaths = exports.getMostCustomizedFirstPartyPath = exports.getCustomEndpointFromFirstPartySuffix = exports.getAllFirstPartyPaths = void 0;
+var FirstPartySuffix_1 = require("./FirstPartySuffix");
+var getAllFirstPartyPaths = function (config, suffix) {
+    var allPaths = [(0, exports.getFirstPartyPath)((0, exports.getDefaultFirstPartyPrefix)(config.appId), suffix)];
+    if (config.customFirstPartyPrefix) {
+        allPaths.push((0, exports.getFirstPartyPath)(config.customFirstPartyPrefix, suffix));
+    }
+    var customEndpoint = (0, exports.getCustomEndpointFromFirstPartySuffix)(config, suffix);
+    if (customEndpoint) {
+        allPaths.push(customEndpoint);
+    }
+    return allPaths;
+};
+exports.getAllFirstPartyPaths = getAllFirstPartyPaths;
+var getCustomEndpointFromFirstPartySuffix = function (config, suffix) {
+    switch (suffix) {
+        case FirstPartySuffix_1.FirstPartySuffix.CAPTCHA:
+            return config.customFirstPartyCaptchaEndpoint;
+        case FirstPartySuffix_1.FirstPartySuffix.SENSOR:
+            return config.customFirstPartySensorEndpoint;
+        case FirstPartySuffix_1.FirstPartySuffix.XHR:
+            return config.customFirstPartyXhrEndpoint;
+        default:
+            return '';
+    }
+};
+exports.getCustomEndpointFromFirstPartySuffix = getCustomEndpointFromFirstPartySuffix;
+var getMostCustomizedFirstPartyPath = function (config, suffix) {
+    var customEndpoint = (0, exports.getCustomEndpointFromFirstPartySuffix)(config, suffix);
+    if (customEndpoint) {
+        return customEndpoint;
+    }
+    if (config.customFirstPartyPrefix) {
+        return (0, exports.getFirstPartyPath)(config.customFirstPartyPrefix, suffix);
+    }
+    return (0, exports.getFirstPartyPath)((0, exports.getDefaultFirstPartyPrefix)(config.appId), suffix);
+};
+exports.getMostCustomizedFirstPartyPath = getMostCustomizedFirstPartyPath;
+var getFirstPartySensorScriptPaths = function (config) {
+    return (0, exports.getAllFirstPartyPaths)(config, FirstPartySuffix_1.FirstPartySuffix.SENSOR);
+};
+exports.getFirstPartySensorScriptPaths = getFirstPartySensorScriptPaths;
+var getFirstPartyCaptchaScriptPathPrefixes = function (config) {
+    return (0, exports.getAllFirstPartyPaths)(config, FirstPartySuffix_1.FirstPartySuffix.CAPTCHA);
+};
+exports.getFirstPartyCaptchaScriptPathPrefixes = getFirstPartyCaptchaScriptPathPrefixes;
+var getFirstPartyXhrPathPrefixes = function (config) {
+    return (0, exports.getAllFirstPartyPaths)(config, FirstPartySuffix_1.FirstPartySuffix.XHR);
+};
+exports.getFirstPartyXhrPathPrefixes = getFirstPartyXhrPathPrefixes;
+var getDefaultFirstPartyPrefix = function (appId) { return appId.substring(2); };
+exports.getDefaultFirstPartyPrefix = getDefaultFirstPartyPrefix;
+var getFirstPartyPath = function (prefix, suffix) { return "".concat((0, exports.addInitialSlashIfNeeded)(prefix)).concat(suffix); };
+exports.getFirstPartyPath = getFirstPartyPath;
+var addInitialSlashIfNeeded = function (path) { return (path.startsWith('/') ? path : "/".concat(path)); };
+exports.addInitialSlashIfNeeded = addInitialSlashIfNeeded;

package/lib/cjs/products/bot_defender/index.js ADDED Viewed

@@ -0,0 +1,25 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./BotDefenderData"), exports);
+__exportStar(require("./BotDefender"), exports);
+__exportStar(require("./BotDefenderActionData"), exports);
+__exportStar(require("./IBotDefender"), exports);
+__exportStar(require("./BotDefenderUtils"), exports);
+__exportStar(require("./reasons"), exports);
+__exportStar(require("./first_party"), exports);
+__exportStar(require("./filter"), exports);
+__exportStar(require("./block"), exports);

package/lib/cjs/products/bot_defender/reasons/BotDefenderBlockReason.js ADDED Viewed

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BotDefenderBlockReason = void 0;
+var BotDefenderBlockReason;
+(function (BotDefenderBlockReason) {
+    BotDefenderBlockReason["S2S_HIGH_SCORE"] = "s2s_high_score";
+    BotDefenderBlockReason["COOKIE_HIGH_SCORE"] = "cookie_high_score";
+})(BotDefenderBlockReason || (exports.BotDefenderBlockReason = BotDefenderBlockReason = {}));

package/lib/cjs/products/bot_defender/reasons/BotDefenderPassReason.js ADDED Viewed

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BotDefenderPassReason = void 0;
+var BotDefenderPassReason;
+(function (BotDefenderPassReason) {
+    BotDefenderPassReason["COOKIE"] = "cookie";
+    BotDefenderPassReason["S2S"] = "s2s";
+    BotDefenderPassReason["S2S_ERROR"] = "s2s_error";
+    BotDefenderPassReason["S2S_TIMEOUT"] = "s2s_timeout";
+})(BotDefenderPassReason || (exports.BotDefenderPassReason = BotDefenderPassReason = {}));

package/lib/cjs/products/bot_defender/reasons/BotDefenderReasonType.js ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ "use strict";
2	+ Object.defineProperty(exports, "__esModule", { value: true });

package/lib/cjs/products/bot_defender/reasons/BotDefenderS2SCallReason.js ADDED Viewed

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BotDefenderS2SCallReason = void 0;
+var BotDefenderS2SCallReason;
+(function (BotDefenderS2SCallReason) {
+    BotDefenderS2SCallReason["COOKIE_EXPIRED"] = "cookie_expired";
+    BotDefenderS2SCallReason["COOKIE_DECRYPTION_FAILED"] = "cookie_decryption_failed";
+    BotDefenderS2SCallReason["COOKIE_VALIDATION_FAILED"] = "cookie_validation_failed";
+    BotDefenderS2SCallReason["NO_COOKIE_WITH_VID"] = "no_cookie_w_vid";
+    BotDefenderS2SCallReason["NO_COOKIE"] = "no_cookie";
+    BotDefenderS2SCallReason["SENSITIVE_ROUTE"] = "sensitive_route";
+    BotDefenderS2SCallReason["MOBILE_ERROR_NO_COOKIE"] = "mobile_error_1";
+    BotDefenderS2SCallReason["MOBILE_ERROR_CONNECTION_ERROR"] = "mobile_error_2";
+    BotDefenderS2SCallReason["MOBILE_ERROR_CERTIFICATE_PINNING_ERROR"] = "mobile_error_3";
+    BotDefenderS2SCallReason["MOBILE_ERROR_BYPASS"] = "mobile_error_4";
+})(BotDefenderS2SCallReason || (exports.BotDefenderS2SCallReason = BotDefenderS2SCallReason = {}));