feat: add privacy-safe production player pageviews

2026-09-30 02:58:33 +00:00
parent 2c93670aaf
commit 1693b20d58
5 changed files with 144 additions and 1 deletions
@@ -0,0 +1,63 @@
+'use strict';
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const vm = require('node:vm');
+const root = path.resolve(__dirname, '..');
+const player = fs.existsSync(path.join(root, 'package.json'));
+const site = player ? 'dc1b14a6-d1ba-4802-b895-553b3c81c677' : 'e00bb594-4c6e-4471-911d-be3f7fdd9fae';
+const host = player ? 'player.nenasets.com' : 'tools.nenasets.com';
+const route = player ? '/' : '/private/onvif/';
+function boot(url) {
+  const scripts = [], tracked = [];
+  const window = { location: new URL(url), umami: {track: () => tracked.push(true)} };
+  const document = { createElement: () => ({setAttribute(k,v) { this[k] = v; }}), head: {appendChild: s => scripts.push(s)} };
+  const context = vm.createContext({window, document});
+  const source = fs.readFileSync(path.join(root, 'static/privacy-pageview.js'), 'utf8');
+  vm.runInContext(source, context);
+  return {window, scripts, tracked, context, source};
+}
+test('production pageviews use one manually loaded no-referrer tracker', () => {
+  const b = boot('https://' + host + route + '?customer=PRIVATE#PRIVATE');
+  assert.equal(b.scripts.length, 1);
+  const s = b.scripts[0];
+  assert.equal(s.src, 'https://umami.nenasets.com/script.js');
+  assert.equal(s.referrerPolicy, 'no-referrer');
+  assert.equal(s['data-auto-track'], 'false');
+  assert.equal(s['data-exclude-search'], 'true');
+  assert.equal(s['data-exclude-hash'], 'true');
+  assert.equal(s['data-fetch-credentials'], 'omit');
+  assert.equal(s['data-domains'], host);
+  assert.equal(s['data-website-id'], site);
+  s.onload(); s.onload();
+  vm.runInContext(b.source, b.context);
+  assert.equal(b.scripts.length, 1);
+  assert.equal(b.tracked.length, 1);
+});
+test('before-send rebuilds a minimal static pageview; no identity, events or arbitrary data', () => {
+  const b = boot('https://' + host + route);
+  const guard = b.window[b.scripts[0]['data-before-send']];
+  const dirty = {website:'PRIVATE',url:'PRIVATE',title:'PRIVATE',hostname:'PRIVATE',referrer:'PRIVATE',name:'PRIVATE',data:{filename:'PRIVATE'},id:'PRIVATE',tag:'PRIVATE',screen:'1920x1080',language:'en-US'};
+  assert.equal(guard('identify', dirty), null);
+  assert.equal(guard('event', dirty), null);
+  delete dirty.name;
+  const safe = JSON.parse(JSON.stringify(guard('event', dirty)));
+  assert.deepEqual(safe, {website:site,hostname:host,url:route,title:player?'Alta Export Player':'ONVIF Tool',referrer:'',screen:'1920x1080',language:'en-US'});
+  assert.ok(!JSON.stringify(safe).includes('PRIVATE'));
+  b.window.location = new URL('https://' + host + '/private/previous/');
+  assert.equal(guard('event', dirty), null);
+});
+test('fail closed on DEV, previous, unknown, API, port, alternate host and HTTP routes', () => {
+  const excluded = ['http://' + host + route, 'https://' + host + ':8443' + route,
+    'https://dev.' + host + route, 'https://127.0.0.1' + route,
+    'https://' + host + '/private/onvif-dev/', 'https://' + host + '/private/onvif-previous/',
+    'https://' + host + '/private/onvif/previous/', 'https://' + host + '/private/onvif/api/lookup',
+    'https://' + host + '/private/onvif/download', 'https://' + host + '/private/onvif/admin',
+    'https://' + host + '/customer-name', 'https://' + host + '/api/verify-cert'];
+  for (const url of excluded) assert.equal(boot(url).scripts.length, 0, url);
+});
+test('only native application document routes are eligible', () => {
+  for(const suffix of (player ? [''] : ['', 'upload', 'results', 'process', 'clear']))
+    assert.equal(boot('https://' + host + route + suffix).scripts.length, 1, suffix);
+});