Skip to content

Commit b3efebf

Browse files
authored
Fixes the leaky key in the telemetry URL (microsoft#3938)
* Fixes the leak of the key * fixing leaky key * Add cookie included data to custom events * Removing version as it is not patched by the cloud * Replicating change in tracking.html
1 parent 1ea3cce commit b3efebf

2 files changed

Lines changed: 6 additions & 4 deletions

File tree

docfiles/apptracking.html

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,16 +18,17 @@
1818
var telemetryItem = envelope.data.baseData;
1919
telemetryItem.properties = telemetryItem.properties || {};
2020
telemetryItem.properties["target"] = pxtConfig.targetId;
21-
telemetryItem.properties["version"] = pxtConfig.targetVersion;
2221
telemetryItem.properties["stage"] = (pxtConfig.relprefix || "/--").replace(/[^a-z]/ig, '')
22+
telemetryItem.properties["cookie"] = includeCookie;
2323
if (typeof Windows !== "undefined")
2424
telemetryItem.properties["WindowsApp"] = 1;
2525
});
2626
});
2727
appInsights.trackPageView(null, scrubUrl(window.location.toString()), {urlReferrer: scrubUrl(document.referrer.toString())});
2828

29-
var scriptIdRegex = /(?:\d{5}-\d{5}-\d{5}-\d{5})|(?:_[0-9a-zA-Z]{12})/g;
29+
//Scrub the key (if any) from the URL.
3030
function scrubUrl(url) {
31+
var scriptIdRegex = /(?:\d{5}-\d{5}-\d{5}-\d{5})|(?:_[0-9a-zA-Z]{12})/g;
3132
return url.replace(scriptIdRegex, "xxxxx-xxxxx-xxxxx-xxxxx");
3233
}
3334
}

docfiles/tracking.html

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,16 +18,17 @@
1818
var telemetryItem = envelope.data.baseData;
1919
telemetryItem.properties = telemetryItem.properties || {};
2020
telemetryItem.properties["target"] = pxtConfig.targetId;
21-
telemetryItem.properties["version"] = pxtConfig.targetVersion;
2221
telemetryItem.properties["stage"] = (pxtConfig.relprefix || "/--").replace(/[^a-z]/ig, '')
22+
telemetryItem.properties["cookie"] = includeCookie;
2323
if (typeof Windows !== "undefined")
2424
telemetryItem.properties["WindowsApp"] = 1;
2525
});
2626
});
2727
appInsights.trackPageView(null, scrubUrl(window.location.toString()), {urlReferrer: scrubUrl(document.referrer.toString())});
2828

29-
var scriptIdRegex = /(?:\d{5}-\d{5}-\d{5}-\d{5})|(?:_[0-9a-zA-Z]{12})/g;
29+
//Scrub the key (if any) from the URL.
3030
function scrubUrl(url) {
31+
var scriptIdRegex = /(?:\d{5}-\d{5}-\d{5}-\d{5})|(?:_[0-9a-zA-Z]{12})/g;
3132
return url.replace(scriptIdRegex, "xxxxx-xxxxx-xxxxx-xxxxx");
3233
}
3334
}

0 commit comments

Comments
 (0)