videomail-client 16.0.0 → 16.0.1

package/README.md

@@ -282,9 +282,7 @@ When the client sends the second, host-form request, enable `submitWithVideomail
 
 ## Privacy and error reporting
 
-Recording sends webcam frames, and audio samples when enabled, to the configured Videomail service for encoding. The package does not provide offline recording.
-
-The `reportErrors` option defaults to `true`. When an error occurs, the client can send the error, recent client logs, browser and operating-system details, page location, screen and orientation data, supported media constraints, and enumerated media-device information to the configured API. Set `reportErrors: false` if your privacy policy requires local-only error handling.
+Read about our privacy and error reporting practices in [Privacy and error reporting](./docs/PRIVACY_ERROR_REPORTING.md).
 
 ## Whitelist
 

package/dist/cjs/index.cjs

@@ -5977,9 +5977,57 @@ var __webpack_modules__ = {
     },
     s1 (module, __unused_rspack_exports, __webpack_require__) {
         "use strict";
+        var getSideChannel = __webpack_require__("M");
         var utils = __webpack_require__("K0");
         var has = Object.prototype.hasOwnProperty;
         var isArray = Array.isArray;
+        var getPrototypeOf = Object.getPrototypeOf;
+        var isPlainContainer = function(value) {
+            if (!value || 'object' != typeof value) return false;
+            if (isArray(value)) return true;
+            var proto = getPrototypeOf(value);
+            return proto === Object.prototype || null === proto;
+        };
+        var emptyCopyOf = function(value) {
+            if (isArray(value)) {
+                var arr = [];
+                arr.length = value.length;
+                return arr;
+            }
+            return null === getPrototypeOf(value) ? {
+                __proto__: null
+            } : {};
+        };
+        var copyInput = function(input) {
+            var copies = getSideChannel();
+            var result = {};
+            var queue = [
+                {
+                    source: input,
+                    target: result
+                }
+            ];
+            for(var i = 0; i < queue.length; ++i){
+                var source = queue[i].source;
+                var target = queue[i].target;
+                var keys = Object.keys(source);
+                for(var j = 0; j < keys.length; ++j){
+                    var value = source[keys[j]];
+                    if (isPlainContainer(value)) {
+                        if (!copies.has(value)) {
+                            var copy = emptyCopyOf(value);
+                            copies.set(value, copy);
+                            queue[queue.length] = {
+                                source: value,
+                                target: copy
+                            };
+                        }
+                        target[keys[j]] = copies.get(value);
+                    } else target[keys[j]] = value;
+                }
+            }
+            return result;
+        };
         var defaults = {
             allowDots: false,
             allowEmptyArrays: false,
@@ -6051,6 +6099,7 @@ var __webpack_modules__ = {
                 var part = parts[i];
                 var bracketEqualsPos = part.indexOf(']=');
                 var pos = -1 === bracketEqualsPos ? part.indexOf('=') : bracketEqualsPos + 1;
+                var isEmptyBracketKey = pos > 1 && '[]' === part.slice(pos - 2, pos);
                 var key;
                 var val;
                 if (-1 === pos) {
@@ -6063,13 +6112,13 @@ var __webpack_modules__ = {
                     });
                 }
                 if (val && options.interpretNumericEntities && 'iso-8859-1' === charset) val = interpretNumericEntities(String(val));
-                if (part.indexOf('[]=') > -1) val = isArray(val) ? [
+                if (isEmptyBracketKey) val = isArray(val) ? [
                     val
                 ] : val;
                 if (options.comma && isArray(val) && val.length > options.arrayLimit) val = utils.combine([], val, options.arrayLimit, options.plainObjects, options.throwOnLimitExceeded);
                 if (null !== key) {
                     var existing = has.call(obj, key);
-                    if (existing && ('combine' === options.duplicates || part.indexOf('[]=') > -1)) obj[key] = utils.combine(obj[key], val, options.arrayLimit, options.plainObjects, options.throwOnLimitExceeded);
+                    if (existing && ('combine' === options.duplicates || isEmptyBracketKey)) obj[key] = utils.combine(obj[key], val, options.arrayLimit, options.plainObjects, options.throwOnLimitExceeded);
                     else if (!existing || 'last' === options.duplicates) obj[key] = val;
                 }
             }
@@ -6111,8 +6160,29 @@ var __webpack_modules__ = {
             }
             return leaf;
         };
+        var topLevelDotsToBrackets = function(key) {
+            var result = '';
+            var depth = 0;
+            for(var i = 0; i < key.length; i += 1){
+                var cu = key.charCodeAt(i);
+                if (0x5B === cu) {
+                    depth += 1;
+                    result += '[';
+                } else if (0x5D === cu) {
+                    if (depth > 0) depth -= 1;
+                    result += ']';
+                } else if (0x2E === cu && 0 === depth && i + 1 < key.length && 0x2E !== key.charCodeAt(i + 1) && 0x5B !== key.charCodeAt(i + 1)) {
+                    var start = i + 1;
+                    var j = start;
+                    while(j < key.length && 0x2E !== key.charCodeAt(j) && 0x5B !== key.charCodeAt(j))j += 1;
+                    result += '[' + key.slice(start, j) + ']';
+                    i = j - 1;
+                } else result += key.charAt(i);
+            }
+            return result;
+        };
         var splitKeyIntoSegments = function(originalKey, options) {
-            var key = options.allowDots ? originalKey.replace(/\.([^.[]+)/g, '[$1]') : originalKey;
+            var key = options.allowDots ? topLevelDotsToBrackets(originalKey) : originalKey;
             if (options.depth <= 0) {
                 if (!options.plainObjects && has.call(Object.prototype, key)) {
                     if (!options.allowPrototypes) return;
@@ -6210,7 +6280,7 @@ var __webpack_modules__ = {
             if ('' === str || null == str) return options.plainObjects ? {
                 __proto__: null
             } : {};
-            var tempObj = 'string' == typeof str ? parseValues(str, options) : str;
+            var tempObj = 'string' == typeof str ? parseValues(str, options) : copyInput(str);
             var obj = options.plainObjects ? {
                 __proto__: null
             } : {};
@@ -6318,11 +6388,11 @@ var __webpack_modules__ = {
             var objKeys;
             if ('comma' === generateArrayPrefix && isArray(obj)) {
                 if (encodeValuesOnly && encoder) obj = utils.maybeMap(obj, function(v) {
-                    return null == v ? v : encoder(v);
+                    return null == v ? v : encoder(v, defaults.encoder, charset, 'value', format);
                 });
                 objKeys = [
                     {
-                        value: obj.length > 0 ? obj.join(',') || null : void 0
+                        value: obj.length > 0 ? utils.toCoercible(obj).join(',') || null : void 0
                     }
                 ];
             } else if (isArray(filter)) objKeys = filter;
@@ -6330,7 +6400,7 @@ var __webpack_modules__ = {
                 var keys = Object.keys(obj);
                 objKeys = sort ? keys.sort(sort) : keys;
             }
-            var encodedPrefix = encodeDotInKeys ? String(prefix).replace(/\./g, '%2E') : String(prefix);
+            var encodedPrefix = String(prefix);
             var adjustedPrefix = commaRoundTrip && isArray(obj) && 1 === obj.length ? encodedPrefix + '[]' : encodedPrefix;
             if (allowEmptyArrays && isArray(obj) && 0 === obj.length && 0 === Object.keys(obj).length) return adjustedPrefix + '[]';
             for(var j = 0; j < objKeys.length; ++j){
@@ -6363,7 +6433,7 @@ var __webpack_modules__ = {
             var filter = defaults.filter;
             if ('function' == typeof opts.filter || isArray(opts.filter)) filter = opts.filter;
             var arrayFormat;
-            arrayFormat = opts.arrayFormat in arrayPrefixGenerators ? opts.arrayFormat : 'indices' in opts ? opts.indices ? 'indices' : 'repeat' : defaults.arrayFormat;
+            arrayFormat = has.call(arrayPrefixGenerators, opts.arrayFormat) ? opts.arrayFormat : 'indices' in opts ? opts.indices ? 'indices' : 'repeat' : defaults.arrayFormat;
             if ('commaRoundTrip' in opts && 'boolean' != typeof opts.commaRoundTrip) throw new TypeError('`commaRoundTrip` must be a boolean, or absent');
             var allowDots = void 0 === opts.allowDots ? true === opts.encodeDotInKeys ? true : defaults.allowDots : !!opts.allowDots;
             return {
@@ -6446,6 +6516,17 @@ var __webpack_modules__ = {
         var setMaxIndex = function(obj, maxIndex) {
             overflowChannel.set(obj, maxIndex);
         };
+        var conflictChannel = getSideChannel();
+        var markConflict = function(obj, maxIndex) {
+            conflictChannel.set(obj, maxIndex);
+            return obj;
+        };
+        var isConflict = function(obj) {
+            return conflictChannel.has(obj);
+        };
+        var getConflictIndex = function(obj) {
+            return conflictChannel.get(obj);
+        };
         var hexTable = function() {
             var array = [];
             for(var i = 0; i < 256; ++i)array[array.length] = '%' + ((i < 16 ? '0' : '') + i.toString(16)).toUpperCase();
@@ -6478,6 +6559,26 @@ var __webpack_modules__ = {
             });
             else obj[key] = value;
         };
+        var maxNumericIndex = function(obj, min) {
+            var max = min;
+            var keys = Object.keys(obj);
+            for(var i = 0; i < keys.length; ++i){
+                var num = parseInt(keys[i], 10);
+                if (String(num) === keys[i] && num > max) max = num;
+            }
+            return max;
+        };
+        var limitedPair = function(first, second, options) {
+            var pair = [
+                first,
+                second
+            ];
+            if (options && 'number' == typeof options.arrayLimit && pair.length > options.arrayLimit) {
+                if (options.throwOnLimitExceeded) throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (1 === options.arrayLimit ? '' : 's') + ' allowed in an array.');
+                return markOverflow(arrayToObject(pair, options), 1);
+            }
+            return pair;
+        };
         var merge = function merge(target, source, options) {
             if (!source) return target;
             if ('object' != typeof source && 'function' != typeof source) {
@@ -6488,19 +6589,20 @@ var __webpack_modules__ = {
                         return markOverflow(arrayToObject(target.concat(source), options), nextIndex);
                     }
                     target[nextIndex] = source;
-                } else if (!target || 'object' != typeof target) return [
-                    target,
-                    source
-                ];
+                } else if (!target || 'object' != typeof target) return limitedPair(target, source, options);
                 else if (isOverflow(target)) {
                     var newIndex = getMaxIndex(target) + 1;
                     target[newIndex] = source;
                     setMaxIndex(target, newIndex);
-                } else if (options && options.strictMerge) return [
-                    target,
-                    source
-                ];
-                else if (options && (options.plainObjects || options.allowPrototypes) || !has.call(Object.prototype, source)) target[source] = true;
+                } else if (options && options.strictMerge && isConflict(target)) {
+                    var nextConflict = getConflictIndex(target) + 1;
+                    if (options.throwOnLimitExceeded && 'number' == typeof options.arrayLimit && nextConflict >= options.arrayLimit) throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (1 === options.arrayLimit ? '' : 's') + ' allowed in an array.');
+                    target[nextConflict] = source;
+                    markConflict(target, nextConflict);
+                } else if (options && options.strictMerge) {
+                    var conflict = limitedPair(target, source, options);
+                    return isArray(conflict) ? markConflict(conflict, 1) : conflict;
+                } else if (options && (options.plainObjects || options.allowPrototypes) || !has.call(Object.prototype, source)) target[source] = true;
                 return target;
             }
             if (!target || 'object' != typeof target) {
@@ -6528,7 +6630,10 @@ var __webpack_modules__ = {
                 return combined;
             }
             var mergeTarget = target;
-            if (isArray(target) && !isArray(source)) mergeTarget = arrayToObject(target, options);
+            if (isArray(target) && !isArray(source)) {
+                mergeTarget = arrayToObject(target, options);
+                if (isConflict(target)) markConflict(mergeTarget, target.length - 1);
+            }
             if (isArray(target) && isArray(source)) {
                 source.forEach(function(item, i) {
                     if (has.call(target, i)) {
@@ -6546,11 +6651,15 @@ var __webpack_modules__ = {
             return Object.keys(source).reduce(function(acc, key) {
                 var value = source[key];
                 has.call(acc, key) ? setProperty(acc, key, merge(acc[key], value, options)) : setProperty(acc, key, value);
-                if (isOverflow(source) && !isOverflow(acc)) markOverflow(acc, getMaxIndex(source));
+                if (isOverflow(source) && !isOverflow(acc)) markOverflow(acc, maxNumericIndex(acc, getMaxIndex(source)));
                 if (isOverflow(acc)) {
                     var keyNum = parseInt(key, 10);
                     if (String(keyNum) === key && keyNum >= 0 && keyNum > getMaxIndex(acc)) setMaxIndex(acc, keyNum);
                 }
+                if (isConflict(acc)) {
+                    var conflictKey = parseInt(key, 10);
+                    if (String(conflictKey) === key && conflictKey > getConflictIndex(acc)) markConflict(acc, conflictKey);
+                }
                 return acc;
             }, mergeTarget);
         };
@@ -6561,6 +6670,7 @@ var __webpack_modules__ = {
             }, target);
         };
         var decode = function(str, defaultDecoder, charset) {
+            if ('string' == typeof str && -1 === str.indexOf('%')) return -1 === str.indexOf('+') ? str : str.replace(/\+/g, ' ');
             var strWithoutPlus = str.replace(/\+/g, ' ');
             if ('iso-8859-1' === charset) return strWithoutPlus.replace(/%[0-9a-f]{2}/gi, unescape);
             try {
@@ -6569,15 +6679,47 @@ var __webpack_modules__ = {
                 return strWithoutPlus;
             }
         };
+        var hasToPrimitive = 'function' == typeof Symbol && 'symbol' == typeof Symbol.toPrimitive;
+        var arrayJoin = Array.prototype.join;
+        var arrayToString = Array.prototype.toString;
+        var objectToString = Object.prototype.toString;
+        var toCoercible = function toCoercible(value, joining) {
+            if (!value || 'object' != typeof value && 'function' != typeof value) return value;
+            if (hasToPrimitive && null != value[Symbol.toPrimitive]) return value;
+            if (isArray(value) && value.toString === arrayToString && value.join === arrayJoin) {
+                var ancestors = joining || getSideChannel();
+                if (ancestors.has(value)) return '';
+                ancestors.set(value, true);
+                var copy;
+                for(var i = 0; i < value.length; i += 1){
+                    var item = value[i];
+                    var coerced = toCoercible(item, ancestors);
+                    if (!copy && coerced !== item) {
+                        copy = [];
+                        for(var j = 0; j < i; j += 1)copy[j] = value[j];
+                    }
+                    if (copy) copy[i] = coerced;
+                }
+                ancestors['delete'](value);
+                return copy || value;
+            }
+            if ('function' == typeof value.toString) return value;
+            var valueOf = value.valueOf;
+            if ('function' == typeof valueOf) {
+                var primitive = valueOf.call(value);
+                if (!primitive || 'object' != typeof primitive && 'function' != typeof primitive) return String(primitive);
+            }
+            return objectToString.call(value);
+        };
         var limit = 1024;
         var encode = function(str, defaultEncoder, charset, kind, format) {
             if (0 === str.length) return str;
             var string = str;
             if ('symbol' == typeof str) string = Symbol.prototype.toString.call(str);
-            else if ('string' != typeof str) string = String(str);
+            else if ('string' != typeof str) string = String(toCoercible(str));
             if ('iso-8859-1' === charset) return escape(string).replace(/%u[0-9a-f]{4}/gi, function($0) {
                 return '%26%23' + parseInt($0.slice(2), 16) + '%3B';
-            });
+            }).replace(/\+/g, '%2B');
             var out = '';
             for(var j = 0; j < string.length; j += limit){
                 var segment = string.length >= limit ? string.slice(j, j + limit) : string;
@@ -6694,7 +6836,8 @@ var __webpack_modules__ = {
             isRegExp: isRegExp,
             markOverflow: markOverflow,
             maybeMap: maybeMap,
-            merge: merge
+            merge: merge,
+            toCoercible: toCoercible
         };
     },
     jY (module, __unused_rspack_exports, __webpack_require__) {
@@ -8105,7 +8248,7 @@ var __webpack_modules__ = {
             });
         });
     },
-    S (__unused_rspack_module, exports1, __webpack_require__) {
+    Sy (__unused_rspack_module, exports1, __webpack_require__) {
         var process = __webpack_require__("zT");
         var getOwnPropertyDescriptors = Object.getOwnPropertyDescriptors || function(obj) {
             var keys = Object.keys(obj);
@@ -10471,7 +10614,7 @@ var __webpack_modules__ = {
             return i[1];
         };
     },
-    RR (module) {
+    R (module) {
         "use strict";
         var stylesInDOM = [];
         function getIndexByIdentifier(identifier) {
@@ -10972,7 +11115,7 @@ var __webpack_exports__ = {};
     var client = __webpack_require__("Q");
     var client_default = /*#__PURE__*/ __webpack_require__.n(client);
     var package_namespaceObject = {
-        rE: "16.0.0"
+        rE: "16.0.1"
     };
     function isAudioEnabled(options) {
         return Boolean(options.audio.enabled);
@@ -10984,7 +11127,7 @@ var __webpack_exports__ = {};
     function isAutoPauseEnabled(options) {
         return options.enableAutoPause && options.enablePause;
     }
-    var util = __webpack_require__("S");
+    var util = __webpack_require__("Sy");
     var util_default = /*#__PURE__*/ __webpack_require__.n(util);
     function getEventDetails(event) {
         const eventWithErrorDetails = event;
@@ -14450,7 +14593,7 @@ var __webpack_exports__ = {};
         }
         constructor(message, options, classList, errData){
             var _ref;
-            super(message, errData), VideomailError_define_property(this, "title", "Error from videomail-client npm package"), VideomailError_define_property(this, "location", window.location.href), VideomailError_define_property(this, "logLines", void 0), VideomailError_define_property(this, "whitelistKey", void 0), VideomailError_define_property(this, "cookie", void 0), VideomailError_define_property(this, "err", void 0), VideomailError_define_property(this, "promise", void 0), VideomailError_define_property(this, "reason", void 0), VideomailError_define_property(this, "browser", void 0), VideomailError_define_property(this, "cpu", void 0), VideomailError_define_property(this, "device", void 0), VideomailError_define_property(this, "engine", void 0), VideomailError_define_property(this, "os", void 0), VideomailError_define_property(this, "screen", void 0), VideomailError_define_property(this, "orientation", void 0), VideomailError_define_property(this, "versions", void 0), VideomailError_define_property(this, "classList", void 0);
+            super(message, errData), VideomailError_define_property(this, "title", "Error from videomail-client npm package"), VideomailError_define_property(this, "location", window.location.href), VideomailError_define_property(this, "logLines", void 0), VideomailError_define_property(this, "whitelistKey", void 0), VideomailError_define_property(this, "err", void 0), VideomailError_define_property(this, "promise", void 0), VideomailError_define_property(this, "reason", void 0), VideomailError_define_property(this, "browser", void 0), VideomailError_define_property(this, "cpu", void 0), VideomailError_define_property(this, "device", void 0), VideomailError_define_property(this, "engine", void 0), VideomailError_define_property(this, "os", void 0), VideomailError_define_property(this, "screen", void 0), VideomailError_define_property(this, "orientation", void 0), VideomailError_define_property(this, "versions", void 0), VideomailError_define_property(this, "classList", void 0);
             this.explanation = null == errData ? void 0 : errData.explanation;
             this.logLines = null == errData ? void 0 : errData.logLines;
             this.whitelistKey = options.whitelistKey;
@@ -14462,9 +14605,6 @@ var __webpack_exports__ = {};
             this.device = usefulClientData.device.type ? usefulClientData.device : void 0;
             this.engine = usefulClientData.engine;
             this.os = usefulClientData.os;
-            let cookie;
-            if (__webpack_require__.g.document.cookie.length > 0) cookie = __webpack_require__.g.document.cookie.split(",").map((c)=>c.trim());
-            this.cookie = cookie && cookie.length > 0 ? cookie : void 0;
             this.screen = [
                 screen.width,
                 screen.height,
@@ -14654,6 +14794,53 @@ var __webpack_exports__ = {};
         return exc;
     }
     const error_findOriginalExc = findOriginalExc;
+    const REDACTED = "[redacted]";
+    const PRIVATE_FIELDS = "cookies?|set[-_]?cookie|(?:proxy[-_]?)?authorization|pass(?:word|phrase|wd)|(?:client[-_]?)?secret|(?:x[-_]?)?api[-_]?key|(?:access|refresh|id|auth|session)[-_]?token|token|(?:x[-_]?)?(?:csrf|xsrf)(?:[-_]?token)?|session(?:[-_]?id)?|e[-_]?mail|from|to|cc|bcc|recipients?|sender";
+    const PRIVATE_FIELD = new RegExp(`^(?:${PRIVATE_FIELDS})$`, "iu");
+    const PRIVATE_CONTENT_FIELD = /^(?:subject|body)$/iu;
+    const URL_FIELD = /^(?:url|uri|href|location|recordLocation|blockedURI|responseURL)$/iu;
+    const LOG_ASSIGNMENT = String.raw`(["']?\b(?:${PRIVATE_FIELDS}|subject|body)["']?\s*[:=]\s*)`;
+    const LOG_VALUES = [
+        /"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'/u.source,
+        /(?:Bearer|Basic)\s+[^\s,;}]+/u.source,
+        /[^\s,;{}[\]]+/u.source
+    ].join("|");
+    const PRIVATE_LOG_VALUE = new RegExp(`${LOG_ASSIGNMENT}(?:${LOG_VALUES})`, "giu");
+    function sanitizeUrl(value, base) {
+        try {
+            const url = new URL(value, base);
+            url.username = "";
+            url.password = "";
+            url.search = "";
+            url.hash = "";
+            return url.href;
+        } catch (unused) {
+            return REDACTED;
+        }
+    }
+    function sanitizeText(text) {
+        return text.replace(/\b(?:https?|wss?):\/\/[^\s"'<>(){}]+/giu, (value)=>{
+            var _ref;
+            var _exec;
+            const position = null != (_ref = null == (_exec = /:\d+:\d+$/u.exec(value)) ? void 0 : _exec[0]) ? _ref : "";
+            const address = position ? value.slice(0, -position.length) : value;
+            return `${sanitizeUrl(address)}${position}`;
+        }).replace(PRIVATE_LOG_VALUE, `$1${REDACTED}`).replace(/\b(Bearer|Basic)\s+[\w.+/~=-]+/giu, `$1 ${REDACTED}`).replace(/\b[\w.%+-]+@[\w.-]+\.[a-z]{2,}\b/giu, REDACTED);
+    }
+    function sanitizeErrorReport(report) {
+        function redactField(key, value) {
+            if (PRIVATE_FIELD.test(key)) return REDACTED;
+            if ("string" != typeof value) return value;
+            if (PRIVATE_CONTENT_FIELD.test(key)) return REDACTED;
+            const text = URL_FIELD.test(key) ? sanitizeUrl(value, report.location) : value;
+            return sanitizeText(text);
+        }
+        const json = JSON.stringify(serializeError(report), redactField);
+        const sanitized = JSON.parse(json);
+        if (null === sanitized || "object" != typeof sanitized) throw new TypeError("An error report must serialize to an object.");
+        return sanitized;
+    }
+    const error_sanitizeErrorReport = sanitizeErrorReport;
     function _extends() {
         _extends = Object.assign || function(target) {
             for(var i = 1; i < arguments.length; i++){
@@ -15312,7 +15499,6 @@ var __webpack_exports__ = {};
                     },
                     browser: err.browser,
                     code: err.code,
-                    cookie: err.cookie,
                     cause: err.cause instanceof Error ? serializeError(err.cause) : err.cause,
                     cpu: err.cpu,
                     device: err.device,
@@ -15333,7 +15519,7 @@ var __webpack_exports__ = {};
                     enumerateDevices,
                     usedConstraints: err.usedConstraints
                 };
-                yield client_default()(FormMethod.POST, url).query(queryParams).set("Timezone-Id", this.timezoneId).withCredentials().send(fullVideomailErrorData).timeout(this.options.timeouts.connection);
+                yield client_default()(FormMethod.POST, url).query(queryParams).set("Timezone-Id", this.timezoneId).withCredentials().send(error_sanitizeErrorReport(fullVideomailErrorData)).timeout(this.options.timeouts.connection);
             }).call(this);
         }
         post(videomail) {
@@ -15602,7 +15788,7 @@ var __webpack_exports__ = {};
         return newOptions;
     }
     const options_mergeWithDefaultOptions = mergeWithDefaultOptions;
-    var injectStylesIntoStyleTag = __webpack_require__("RR");
+    var injectStylesIntoStyleTag = __webpack_require__("R");
     var injectStylesIntoStyleTag_default = /*#__PURE__*/ __webpack_require__.n(injectStylesIntoStyleTag);
     var styleDomAPI = __webpack_require__("Bd");
     var styleDomAPI_default = /*#__PURE__*/ __webpack_require__.n(styleDomAPI);

package/dist/esm/index.js

@@ -3620,7 +3620,7 @@ const constants = {
     }
 };
 var package_namespaceObject = {
-    rE: "16.0.0"
+    rE: "16.0.1"
 };
 function isAudioEnabled(options) {
     return Boolean(options.audio.enabled);
@@ -3835,7 +3835,7 @@ class VideomailError extends error_HTTPVideomailError {
         return this.classList;
     }
     constructor(message, options, classList, errData){
-        super(message, errData), VideomailError_define_property(this, "title", "Error from videomail-client npm package"), VideomailError_define_property(this, "location", window.location.href), VideomailError_define_property(this, "logLines", void 0), VideomailError_define_property(this, "whitelistKey", void 0), VideomailError_define_property(this, "cookie", void 0), VideomailError_define_property(this, "err", void 0), VideomailError_define_property(this, "promise", void 0), VideomailError_define_property(this, "reason", void 0), VideomailError_define_property(this, "browser", void 0), VideomailError_define_property(this, "cpu", void 0), VideomailError_define_property(this, "device", void 0), VideomailError_define_property(this, "engine", void 0), VideomailError_define_property(this, "os", void 0), VideomailError_define_property(this, "screen", void 0), VideomailError_define_property(this, "orientation", void 0), VideomailError_define_property(this, "versions", void 0), VideomailError_define_property(this, "classList", void 0);
+        super(message, errData), VideomailError_define_property(this, "title", "Error from videomail-client npm package"), VideomailError_define_property(this, "location", window.location.href), VideomailError_define_property(this, "logLines", void 0), VideomailError_define_property(this, "whitelistKey", void 0), VideomailError_define_property(this, "err", void 0), VideomailError_define_property(this, "promise", void 0), VideomailError_define_property(this, "reason", void 0), VideomailError_define_property(this, "browser", void 0), VideomailError_define_property(this, "cpu", void 0), VideomailError_define_property(this, "device", void 0), VideomailError_define_property(this, "engine", void 0), VideomailError_define_property(this, "os", void 0), VideomailError_define_property(this, "screen", void 0), VideomailError_define_property(this, "orientation", void 0), VideomailError_define_property(this, "versions", void 0), VideomailError_define_property(this, "classList", void 0);
         this.explanation = errData?.explanation;
         this.logLines = errData?.logLines;
         this.whitelistKey = options.whitelistKey;
@@ -3847,9 +3847,6 @@ class VideomailError extends error_HTTPVideomailError {
         this.device = usefulClientData.device.type ? usefulClientData.device : void 0;
         this.engine = usefulClientData.engine;
         this.os = usefulClientData.os;
-        let cookie;
-        if (__webpack_require__.g.document.cookie.length > 0) cookie = __webpack_require__.g.document.cookie.split(",").map((c)=>c.trim());
-        this.cookie = cookie && cookie.length > 0 ? cookie : void 0;
         this.screen = [
             screen.width,
             screen.height,
@@ -4037,6 +4034,51 @@ function findOriginalExc(exc) {
     return exc;
 }
 const error_findOriginalExc = findOriginalExc;
+const REDACTED = "[redacted]";
+const PRIVATE_FIELDS = "cookies?|set[-_]?cookie|(?:proxy[-_]?)?authorization|pass(?:word|phrase|wd)|(?:client[-_]?)?secret|(?:x[-_]?)?api[-_]?key|(?:access|refresh|id|auth|session)[-_]?token|token|(?:x[-_]?)?(?:csrf|xsrf)(?:[-_]?token)?|session(?:[-_]?id)?|e[-_]?mail|from|to|cc|bcc|recipients?|sender";
+const PRIVATE_FIELD = new RegExp(`^(?:${PRIVATE_FIELDS})$`, "iu");
+const PRIVATE_CONTENT_FIELD = /^(?:subject|body)$/iu;
+const URL_FIELD = /^(?:url|uri|href|location|recordLocation|blockedURI|responseURL)$/iu;
+const LOG_ASSIGNMENT = String.raw`(["']?\b(?:${PRIVATE_FIELDS}|subject|body)["']?\s*[:=]\s*)`;
+const LOG_VALUES = [
+    /"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'/u.source,
+    /(?:Bearer|Basic)\s+[^\s,;}]+/u.source,
+    /[^\s,;{}[\]]+/u.source
+].join("|");
+const PRIVATE_LOG_VALUE = new RegExp(`${LOG_ASSIGNMENT}(?:${LOG_VALUES})`, "giu");
+function sanitizeUrl(value, base) {
+    try {
+        const url = new URL(value, base);
+        url.username = "";
+        url.password = "";
+        url.search = "";
+        url.hash = "";
+        return url.href;
+    } catch  {
+        return REDACTED;
+    }
+}
+function sanitizeText(text) {
+    return text.replace(/\b(?:https?|wss?):\/\/[^\s"'<>(){}]+/giu, (value)=>{
+        const position = /:\d+:\d+$/u.exec(value)?.[0] ?? "";
+        const address = position ? value.slice(0, -position.length) : value;
+        return `${sanitizeUrl(address)}${position}`;
+    }).replace(PRIVATE_LOG_VALUE, `$1${REDACTED}`).replace(/\b(Bearer|Basic)\s+[\w.+/~=-]+/giu, `$1 ${REDACTED}`).replace(/\b[\w.%+-]+@[\w.-]+\.[a-z]{2,}\b/giu, REDACTED);
+}
+function sanitizeErrorReport(report) {
+    function redactField(key, value) {
+        if (PRIVATE_FIELD.test(key)) return REDACTED;
+        if ("string" != typeof value) return value;
+        if (PRIVATE_CONTENT_FIELD.test(key)) return REDACTED;
+        const text = URL_FIELD.test(key) ? sanitizeUrl(value, report.location) : value;
+        return sanitizeText(text);
+    }
+    const json = JSON.stringify(serializeError(report), redactField);
+    const sanitized = JSON.parse(json);
+    if (null === sanitized || "object" != typeof sanitized) throw new TypeError("An error report must serialize to an object.");
+    return sanitized;
+}
+const error_sanitizeErrorReport = sanitizeErrorReport;
 function Despot_define_property(obj, key, value) {
     if (key in obj) Object.defineProperty(obj, key, {
         value: value,
@@ -4500,7 +4542,6 @@ class Resource {
             },
             browser: err.browser,
             code: err.code,
-            cookie: err.cookie,
             cause: err.cause instanceof Error ? serializeError(err.cause) : err.cause,
             cpu: err.cpu,
             device: err.device,
@@ -4521,7 +4562,7 @@ class Resource {
             enumerateDevices,
             usedConstraints: err.usedConstraints
         };
-        await superagent(FormMethod.POST, url).query(queryParams).set("Timezone-Id", this.timezoneId).withCredentials().send(fullVideomailErrorData).timeout(this.options.timeouts.connection);
+        await superagent(FormMethod.POST, url).query(queryParams).set("Timezone-Id", this.timezoneId).withCredentials().send(error_sanitizeErrorReport(fullVideomailErrorData)).timeout(this.options.timeouts.connection);
     }
     async post(videomail) {
         const newVideomail = this.applyDefaultValues(videomail);

package/dist/esm/types/error.d.ts

@@ -29,7 +29,6 @@ export interface VideomailErrorData {
 }
 export interface FullVideomailErrorData extends VideomailErrorData {
     browser: IBrowser;
-    cookie?: string[] | undefined;
     cpu?: ICPU | undefined;
     device?: IDevice | undefined;
     engine: IEngine;

package/dist/esm/util/error/VideomailError.d.ts

@@ -12,7 +12,6 @@ declare class VideomailError extends HTTPVideomailError {
     readonly location: string;
     logLines?: string[] | undefined;
     whitelistKey: string | undefined;
-    cookie: string[] | undefined;
     err?: Error | undefined;
     promise?: Promise<any> | undefined;
     reason?: any;

package/dist/esm/util/error/sanitizeErrorReport.d.ts

@@ -0,0 +1,3 @@
+import type { FullVideomailErrorData } from "../../types/error.js";
+declare function sanitizeErrorReport(report: FullVideomailErrorData): object;
+export default sanitizeErrorReport;

package/dist/umd/index.js

@@ -5983,9 +5983,57 @@
             },
             s1 (module1, __unused_rspack_exports, __webpack_require__) {
                 "use strict";
+                var getSideChannel = __webpack_require__("M");
                 var utils = __webpack_require__("K0");
                 var has = Object.prototype.hasOwnProperty;
                 var isArray = Array.isArray;
+                var getPrototypeOf = Object.getPrototypeOf;
+                var isPlainContainer = function(value) {
+                    if (!value || 'object' != typeof value) return false;
+                    if (isArray(value)) return true;
+                    var proto = getPrototypeOf(value);
+                    return proto === Object.prototype || null === proto;
+                };
+                var emptyCopyOf = function(value) {
+                    if (isArray(value)) {
+                        var arr = [];
+                        arr.length = value.length;
+                        return arr;
+                    }
+                    return null === getPrototypeOf(value) ? {
+                        __proto__: null
+                    } : {};
+                };
+                var copyInput = function(input) {
+                    var copies = getSideChannel();
+                    var result = {};
+                    var queue = [
+                        {
+                            source: input,
+                            target: result
+                        }
+                    ];
+                    for(var i = 0; i < queue.length; ++i){
+                        var source = queue[i].source;
+                        var target = queue[i].target;
+                        var keys = Object.keys(source);
+                        for(var j = 0; j < keys.length; ++j){
+                            var value = source[keys[j]];
+                            if (isPlainContainer(value)) {
+                                if (!copies.has(value)) {
+                                    var copy = emptyCopyOf(value);
+                                    copies.set(value, copy);
+                                    queue[queue.length] = {
+                                        source: value,
+                                        target: copy
+                                    };
+                                }
+                                target[keys[j]] = copies.get(value);
+                            } else target[keys[j]] = value;
+                        }
+                    }
+                    return result;
+                };
                 var defaults = {
                     allowDots: false,
                     allowEmptyArrays: false,
@@ -6057,6 +6105,7 @@
                         var part = parts[i];
                         var bracketEqualsPos = part.indexOf(']=');
                         var pos = -1 === bracketEqualsPos ? part.indexOf('=') : bracketEqualsPos + 1;
+                        var isEmptyBracketKey = pos > 1 && '[]' === part.slice(pos - 2, pos);
                         var key;
                         var val;
                         if (-1 === pos) {
@@ -6069,13 +6118,13 @@
                             });
                         }
                         if (val && options.interpretNumericEntities && 'iso-8859-1' === charset) val = interpretNumericEntities(String(val));
-                        if (part.indexOf('[]=') > -1) val = isArray(val) ? [
+                        if (isEmptyBracketKey) val = isArray(val) ? [
                             val
                         ] : val;
                         if (options.comma && isArray(val) && val.length > options.arrayLimit) val = utils.combine([], val, options.arrayLimit, options.plainObjects, options.throwOnLimitExceeded);
                         if (null !== key) {
                             var existing = has.call(obj, key);
-                            if (existing && ('combine' === options.duplicates || part.indexOf('[]=') > -1)) obj[key] = utils.combine(obj[key], val, options.arrayLimit, options.plainObjects, options.throwOnLimitExceeded);
+                            if (existing && ('combine' === options.duplicates || isEmptyBracketKey)) obj[key] = utils.combine(obj[key], val, options.arrayLimit, options.plainObjects, options.throwOnLimitExceeded);
                             else if (!existing || 'last' === options.duplicates) obj[key] = val;
                         }
                     }
@@ -6117,8 +6166,29 @@
                     }
                     return leaf;
                 };
+                var topLevelDotsToBrackets = function(key) {
+                    var result = '';
+                    var depth = 0;
+                    for(var i = 0; i < key.length; i += 1){
+                        var cu = key.charCodeAt(i);
+                        if (0x5B === cu) {
+                            depth += 1;
+                            result += '[';
+                        } else if (0x5D === cu) {
+                            if (depth > 0) depth -= 1;
+                            result += ']';
+                        } else if (0x2E === cu && 0 === depth && i + 1 < key.length && 0x2E !== key.charCodeAt(i + 1) && 0x5B !== key.charCodeAt(i + 1)) {
+                            var start = i + 1;
+                            var j = start;
+                            while(j < key.length && 0x2E !== key.charCodeAt(j) && 0x5B !== key.charCodeAt(j))j += 1;
+                            result += '[' + key.slice(start, j) + ']';
+                            i = j - 1;
+                        } else result += key.charAt(i);
+                    }
+                    return result;
+                };
                 var splitKeyIntoSegments = function(originalKey, options) {
-                    var key = options.allowDots ? originalKey.replace(/\.([^.[]+)/g, '[$1]') : originalKey;
+                    var key = options.allowDots ? topLevelDotsToBrackets(originalKey) : originalKey;
                     if (options.depth <= 0) {
                         if (!options.plainObjects && has.call(Object.prototype, key)) {
                             if (!options.allowPrototypes) return;
@@ -6216,7 +6286,7 @@
                     if ('' === str || null == str) return options.plainObjects ? {
                         __proto__: null
                     } : {};
-                    var tempObj = 'string' == typeof str ? parseValues(str, options) : str;
+                    var tempObj = 'string' == typeof str ? parseValues(str, options) : copyInput(str);
                     var obj = options.plainObjects ? {
                         __proto__: null
                     } : {};
@@ -6324,11 +6394,11 @@
                     var objKeys;
                     if ('comma' === generateArrayPrefix && isArray(obj)) {
                         if (encodeValuesOnly && encoder) obj = utils.maybeMap(obj, function(v) {
-                            return null == v ? v : encoder(v);
+                            return null == v ? v : encoder(v, defaults.encoder, charset, 'value', format);
                         });
                         objKeys = [
                             {
-                                value: obj.length > 0 ? obj.join(',') || null : void 0
+                                value: obj.length > 0 ? utils.toCoercible(obj).join(',') || null : void 0
                             }
                         ];
                     } else if (isArray(filter)) objKeys = filter;
@@ -6336,7 +6406,7 @@
                         var keys = Object.keys(obj);
                         objKeys = sort ? keys.sort(sort) : keys;
                     }
-                    var encodedPrefix = encodeDotInKeys ? String(prefix).replace(/\./g, '%2E') : String(prefix);
+                    var encodedPrefix = String(prefix);
                     var adjustedPrefix = commaRoundTrip && isArray(obj) && 1 === obj.length ? encodedPrefix + '[]' : encodedPrefix;
                     if (allowEmptyArrays && isArray(obj) && 0 === obj.length && 0 === Object.keys(obj).length) return adjustedPrefix + '[]';
                     for(var j = 0; j < objKeys.length; ++j){
@@ -6369,7 +6439,7 @@
                     var filter = defaults.filter;
                     if ('function' == typeof opts.filter || isArray(opts.filter)) filter = opts.filter;
                     var arrayFormat;
-                    arrayFormat = opts.arrayFormat in arrayPrefixGenerators ? opts.arrayFormat : 'indices' in opts ? opts.indices ? 'indices' : 'repeat' : defaults.arrayFormat;
+                    arrayFormat = has.call(arrayPrefixGenerators, opts.arrayFormat) ? opts.arrayFormat : 'indices' in opts ? opts.indices ? 'indices' : 'repeat' : defaults.arrayFormat;
                     if ('commaRoundTrip' in opts && 'boolean' != typeof opts.commaRoundTrip) throw new TypeError('`commaRoundTrip` must be a boolean, or absent');
                     var allowDots = void 0 === opts.allowDots ? true === opts.encodeDotInKeys ? true : defaults.allowDots : !!opts.allowDots;
                     return {
@@ -6452,6 +6522,17 @@
                 var setMaxIndex = function(obj, maxIndex) {
                     overflowChannel.set(obj, maxIndex);
                 };
+                var conflictChannel = getSideChannel();
+                var markConflict = function(obj, maxIndex) {
+                    conflictChannel.set(obj, maxIndex);
+                    return obj;
+                };
+                var isConflict = function(obj) {
+                    return conflictChannel.has(obj);
+                };
+                var getConflictIndex = function(obj) {
+                    return conflictChannel.get(obj);
+                };
                 var hexTable = function() {
                     var array = [];
                     for(var i = 0; i < 256; ++i)array[array.length] = '%' + ((i < 16 ? '0' : '') + i.toString(16)).toUpperCase();
@@ -6484,6 +6565,26 @@
                     });
                     else obj[key] = value;
                 };
+                var maxNumericIndex = function(obj, min) {
+                    var max = min;
+                    var keys = Object.keys(obj);
+                    for(var i = 0; i < keys.length; ++i){
+                        var num = parseInt(keys[i], 10);
+                        if (String(num) === keys[i] && num > max) max = num;
+                    }
+                    return max;
+                };
+                var limitedPair = function(first, second, options) {
+                    var pair = [
+                        first,
+                        second
+                    ];
+                    if (options && 'number' == typeof options.arrayLimit && pair.length > options.arrayLimit) {
+                        if (options.throwOnLimitExceeded) throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (1 === options.arrayLimit ? '' : 's') + ' allowed in an array.');
+                        return markOverflow(arrayToObject(pair, options), 1);
+                    }
+                    return pair;
+                };
                 var merge = function merge(target, source, options) {
                     if (!source) return target;
                     if ('object' != typeof source && 'function' != typeof source) {
@@ -6494,19 +6595,20 @@
                                 return markOverflow(arrayToObject(target.concat(source), options), nextIndex);
                             }
                             target[nextIndex] = source;
-                        } else if (!target || 'object' != typeof target) return [
-                            target,
-                            source
-                        ];
+                        } else if (!target || 'object' != typeof target) return limitedPair(target, source, options);
                         else if (isOverflow(target)) {
                             var newIndex = getMaxIndex(target) + 1;
                             target[newIndex] = source;
                             setMaxIndex(target, newIndex);
-                        } else if (options && options.strictMerge) return [
-                            target,
-                            source
-                        ];
-                        else if (options && (options.plainObjects || options.allowPrototypes) || !has.call(Object.prototype, source)) target[source] = true;
+                        } else if (options && options.strictMerge && isConflict(target)) {
+                            var nextConflict = getConflictIndex(target) + 1;
+                            if (options.throwOnLimitExceeded && 'number' == typeof options.arrayLimit && nextConflict >= options.arrayLimit) throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (1 === options.arrayLimit ? '' : 's') + ' allowed in an array.');
+                            target[nextConflict] = source;
+                            markConflict(target, nextConflict);
+                        } else if (options && options.strictMerge) {
+                            var conflict = limitedPair(target, source, options);
+                            return isArray(conflict) ? markConflict(conflict, 1) : conflict;
+                        } else if (options && (options.plainObjects || options.allowPrototypes) || !has.call(Object.prototype, source)) target[source] = true;
                         return target;
                     }
                     if (!target || 'object' != typeof target) {
@@ -6534,7 +6636,10 @@
                         return combined;
                     }
                     var mergeTarget = target;
-                    if (isArray(target) && !isArray(source)) mergeTarget = arrayToObject(target, options);
+                    if (isArray(target) && !isArray(source)) {
+                        mergeTarget = arrayToObject(target, options);
+                        if (isConflict(target)) markConflict(mergeTarget, target.length - 1);
+                    }
                     if (isArray(target) && isArray(source)) {
                         source.forEach(function(item, i) {
                             if (has.call(target, i)) {
@@ -6552,11 +6657,15 @@
                     return Object.keys(source).reduce(function(acc, key) {
                         var value = source[key];
                         has.call(acc, key) ? setProperty(acc, key, merge(acc[key], value, options)) : setProperty(acc, key, value);
-                        if (isOverflow(source) && !isOverflow(acc)) markOverflow(acc, getMaxIndex(source));
+                        if (isOverflow(source) && !isOverflow(acc)) markOverflow(acc, maxNumericIndex(acc, getMaxIndex(source)));
                         if (isOverflow(acc)) {
                             var keyNum = parseInt(key, 10);
                             if (String(keyNum) === key && keyNum >= 0 && keyNum > getMaxIndex(acc)) setMaxIndex(acc, keyNum);
                         }
+                        if (isConflict(acc)) {
+                            var conflictKey = parseInt(key, 10);
+                            if (String(conflictKey) === key && conflictKey > getConflictIndex(acc)) markConflict(acc, conflictKey);
+                        }
                         return acc;
                     }, mergeTarget);
                 };
@@ -6567,6 +6676,7 @@
                     }, target);
                 };
                 var decode = function(str, defaultDecoder, charset) {
+                    if ('string' == typeof str && -1 === str.indexOf('%')) return -1 === str.indexOf('+') ? str : str.replace(/\+/g, ' ');
                     var strWithoutPlus = str.replace(/\+/g, ' ');
                     if ('iso-8859-1' === charset) return strWithoutPlus.replace(/%[0-9a-f]{2}/gi, unescape);
                     try {
@@ -6575,15 +6685,47 @@
                         return strWithoutPlus;
                     }
                 };
+                var hasToPrimitive = 'function' == typeof Symbol && 'symbol' == typeof Symbol.toPrimitive;
+                var arrayJoin = Array.prototype.join;
+                var arrayToString = Array.prototype.toString;
+                var objectToString = Object.prototype.toString;
+                var toCoercible = function toCoercible(value, joining) {
+                    if (!value || 'object' != typeof value && 'function' != typeof value) return value;
+                    if (hasToPrimitive && null != value[Symbol.toPrimitive]) return value;
+                    if (isArray(value) && value.toString === arrayToString && value.join === arrayJoin) {
+                        var ancestors = joining || getSideChannel();
+                        if (ancestors.has(value)) return '';
+                        ancestors.set(value, true);
+                        var copy;
+                        for(var i = 0; i < value.length; i += 1){
+                            var item = value[i];
+                            var coerced = toCoercible(item, ancestors);
+                            if (!copy && coerced !== item) {
+                                copy = [];
+                                for(var j = 0; j < i; j += 1)copy[j] = value[j];
+                            }
+                            if (copy) copy[i] = coerced;
+                        }
+                        ancestors['delete'](value);
+                        return copy || value;
+                    }
+                    if ('function' == typeof value.toString) return value;
+                    var valueOf = value.valueOf;
+                    if ('function' == typeof valueOf) {
+                        var primitive = valueOf.call(value);
+                        if (!primitive || 'object' != typeof primitive && 'function' != typeof primitive) return String(primitive);
+                    }
+                    return objectToString.call(value);
+                };
                 var limit = 1024;
                 var encode = function(str, defaultEncoder, charset, kind, format) {
                     if (0 === str.length) return str;
                     var string = str;
                     if ('symbol' == typeof str) string = Symbol.prototype.toString.call(str);
-                    else if ('string' != typeof str) string = String(str);
+                    else if ('string' != typeof str) string = String(toCoercible(str));
                     if ('iso-8859-1' === charset) return escape(string).replace(/%u[0-9a-f]{4}/gi, function($0) {
                         return '%26%23' + parseInt($0.slice(2), 16) + '%3B';
-                    });
+                    }).replace(/\+/g, '%2B');
                     var out = '';
                     for(var j = 0; j < string.length; j += limit){
                         var segment = string.length >= limit ? string.slice(j, j + limit) : string;
@@ -6700,7 +6842,8 @@
                     isRegExp: isRegExp,
                     markOverflow: markOverflow,
                     maybeMap: maybeMap,
-                    merge: merge
+                    merge: merge,
+                    toCoercible: toCoercible
                 };
             },
             jY (module1, __unused_rspack_exports, __webpack_require__) {
@@ -8111,7 +8254,7 @@
                     });
                 });
             },
-            S (__unused_rspack_module, exports1, __webpack_require__) {
+            Sy (__unused_rspack_module, exports1, __webpack_require__) {
                 var process = __webpack_require__("zT");
                 var getOwnPropertyDescriptors = Object.getOwnPropertyDescriptors || function(obj) {
                     var keys = Object.keys(obj);
@@ -10477,7 +10620,7 @@
                     return i[1];
                 };
             },
-            RR (module1) {
+            R (module1) {
                 "use strict";
                 var stylesInDOM = [];
                 function getIndexByIdentifier(identifier) {
@@ -10978,7 +11121,7 @@
             var client = __webpack_require__("Q");
             var client_default = /*#__PURE__*/ __webpack_require__.n(client);
             var package_namespaceObject = {
-                rE: "16.0.0"
+                rE: "16.0.1"
             };
             function isAudioEnabled(options) {
                 return Boolean(options.audio.enabled);
@@ -10990,7 +11133,7 @@
             function isAutoPauseEnabled(options) {
                 return options.enableAutoPause && options.enablePause;
             }
-            var util = __webpack_require__("S");
+            var util = __webpack_require__("Sy");
             var util_default = /*#__PURE__*/ __webpack_require__.n(util);
             function getEventDetails(event) {
                 const eventWithErrorDetails = event;
@@ -14421,7 +14564,6 @@
                 location = window.location.href;
                 logLines;
                 whitelistKey;
-                cookie;
                 err;
                 promise;
                 reason;
@@ -14459,9 +14601,6 @@
                     this.device = usefulClientData.device.type ? usefulClientData.device : void 0;
                     this.engine = usefulClientData.engine;
                     this.os = usefulClientData.os;
-                    let cookie;
-                    if (__webpack_require__.g.document.cookie.length > 0) cookie = __webpack_require__.g.document.cookie.split(",").map((c)=>c.trim());
-                    this.cookie = cookie && cookie.length > 0 ? cookie : void 0;
                     this.screen = [
                         screen.width,
                         screen.height,
@@ -14646,6 +14785,51 @@
                 return exc;
             }
             const error_findOriginalExc = findOriginalExc;
+            const REDACTED = "[redacted]";
+            const PRIVATE_FIELDS = "cookies?|set[-_]?cookie|(?:proxy[-_]?)?authorization|pass(?:word|phrase|wd)|(?:client[-_]?)?secret|(?:x[-_]?)?api[-_]?key|(?:access|refresh|id|auth|session)[-_]?token|token|(?:x[-_]?)?(?:csrf|xsrf)(?:[-_]?token)?|session(?:[-_]?id)?|e[-_]?mail|from|to|cc|bcc|recipients?|sender";
+            const PRIVATE_FIELD = new RegExp(`^(?:${PRIVATE_FIELDS})$`, "iu");
+            const PRIVATE_CONTENT_FIELD = /^(?:subject|body)$/iu;
+            const URL_FIELD = /^(?:url|uri|href|location|recordLocation|blockedURI|responseURL)$/iu;
+            const LOG_ASSIGNMENT = String.raw`(["']?\b(?:${PRIVATE_FIELDS}|subject|body)["']?\s*[:=]\s*)`;
+            const LOG_VALUES = [
+                /"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'/u.source,
+                /(?:Bearer|Basic)\s+[^\s,;}]+/u.source,
+                /[^\s,;{}[\]]+/u.source
+            ].join("|");
+            const PRIVATE_LOG_VALUE = new RegExp(`${LOG_ASSIGNMENT}(?:${LOG_VALUES})`, "giu");
+            function sanitizeUrl(value, base) {
+                try {
+                    const url = new URL(value, base);
+                    url.username = "";
+                    url.password = "";
+                    url.search = "";
+                    url.hash = "";
+                    return url.href;
+                } catch  {
+                    return REDACTED;
+                }
+            }
+            function sanitizeText(text) {
+                return text.replace(/\b(?:https?|wss?):\/\/[^\s"'<>(){}]+/giu, (value)=>{
+                    const position = /:\d+:\d+$/u.exec(value)?.[0] ?? "";
+                    const address = position ? value.slice(0, -position.length) : value;
+                    return `${sanitizeUrl(address)}${position}`;
+                }).replace(PRIVATE_LOG_VALUE, `$1${REDACTED}`).replace(/\b(Bearer|Basic)\s+[\w.+/~=-]+/giu, `$1 ${REDACTED}`).replace(/\b[\w.%+-]+@[\w.-]+\.[a-z]{2,}\b/giu, REDACTED);
+            }
+            function sanitizeErrorReport(report) {
+                function redactField(key, value) {
+                    if (PRIVATE_FIELD.test(key)) return REDACTED;
+                    if ("string" != typeof value) return value;
+                    if (PRIVATE_CONTENT_FIELD.test(key)) return REDACTED;
+                    const text = URL_FIELD.test(key) ? sanitizeUrl(value, report.location) : value;
+                    return sanitizeText(text);
+                }
+                const json = JSON.stringify(serializeError(report), redactField);
+                const sanitized = JSON.parse(json);
+                if (null === sanitized || "object" != typeof sanitized) throw new TypeError("An error report must serialize to an object.");
+                return sanitized;
+            }
+            const error_sanitizeErrorReport = sanitizeErrorReport;
             function _extends() {
                 _extends = Object.assign || function(target) {
                     for(var i = 1; i < arguments.length; i++){
@@ -15203,7 +15387,6 @@
                         },
                         browser: err.browser,
                         code: err.code,
-                        cookie: err.cookie,
                         cause: err.cause instanceof Error ? serializeError(err.cause) : err.cause,
                         cpu: err.cpu,
                         device: err.device,
@@ -15224,7 +15407,7 @@
                         enumerateDevices,
                         usedConstraints: err.usedConstraints
                     };
-                    await client_default()(FormMethod.POST, url).query(queryParams).set("Timezone-Id", this.timezoneId).withCredentials().send(fullVideomailErrorData).timeout(this.options.timeouts.connection);
+                    await client_default()(FormMethod.POST, url).query(queryParams).set("Timezone-Id", this.timezoneId).withCredentials().send(error_sanitizeErrorReport(fullVideomailErrorData)).timeout(this.options.timeouts.connection);
                 }
                 async post(videomail) {
                     const newVideomail = this.applyDefaultValues(videomail);
@@ -15468,7 +15651,7 @@
                 return newOptions;
             }
             const options_mergeWithDefaultOptions = mergeWithDefaultOptions;
-            var injectStylesIntoStyleTag = __webpack_require__("RR");
+            var injectStylesIntoStyleTag = __webpack_require__("R");
             var injectStylesIntoStyleTag_default = /*#__PURE__*/ __webpack_require__.n(injectStylesIntoStyleTag);
             var styleDomAPI = __webpack_require__("Bd");
             var styleDomAPI_default = /*#__PURE__*/ __webpack_require__.n(styleDomAPI);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "videomail-client",
-  "version": "16.0.0",
+  "version": "16.0.1",
   "description": "A wicked npm package to record videos directly in the browser, for Deaf and Sign Language!",
   "keywords": [
     "webcam",
@@ -101,9 +101,9 @@
     "@types/ua-parser-js": "0.7.39",
     "@vitest/eslint-plugin": "1.6.27",
     "audit-ci": "7.1.0",
-    "chromatic": "18.12.1",
+    "chromatic": "18.13.0",
     "cross-env": "10.1.0",
-    "eslint": "10.12.0",
+    "eslint": "10.13.0",
     "eslint-import-resolver-typescript": "4.4.5",
     "eslint-plugin-de-morgan": "2.2.1",
     "eslint-plugin-depend": "1.5.0",
@@ -112,7 +112,7 @@
     "eslint-plugin-regexp": "3.3.1",
     "eslint-plugin-simple-import-sort": "14.0.0",
     "globals": "17.13.0",
-    "jsdom": "30.1.2",
+    "jsdom": "30.1.3",
     "msw": "2.15.0",
     "msw-storybook-addon": "3.0.3",
     "prettier": "3.9.10",
@@ -126,11 +126,11 @@
     "type-fest": "5.10.0",
     "typescript": "6.0.3",
     "typescript-eslint": "8.71.2",
-    "vitest": "5.0.4"
+    "vitest": "5.0.5"
   },
   "engines": {
-    "node": "^26.5.0",
-    "npm": ">=11.16.0"
+    "node": "^26.12.0",
+    "npm": ">=11.20.0"
   },
   "msw": {
     "workerDirectory": [