✨[REPLAY-336] Privacy by Default: MVP scaffold

packages/core/src/domain/configuration.ts

@@ -13,6 +13,7 @@ export const DEFAULT_CONFIGURATION = {
   silentMultipleInit: false,
   trackInteractions: false,
   trackViewsManually: false,
+  censorshipLevel: 'PUBLIC',
 
   /**
    * arbitrary value, byte precision not needed
@@ -54,6 +55,7 @@ export interface UserConfiguration {
   trackViewsManually?: boolean
   proxyHost?: string
   beforeSend?: BeforeSendCallback
+  censorshipLevel?: string
 
   service?: string
   env?: string
@@ -81,6 +83,7 @@ export type Configuration = typeof DEFAULT_CONFIGURATION &
 
     service?: string
     beforeSend?: BeforeSendCallback
+    censorshipLevel?: string
 
     isEnabled: (feature: string) => boolean
   }
@@ -139,6 +142,10 @@ export function buildConfiguration(userConfiguration: UserConfiguration, buildEn
     configuration.trackViewsManually = !!userConfiguration.trackViewsManually
   }
 
+  if ('censorshipLevel' in userConfiguration) {
+    configuration.censorshipLevel = userConfiguration.censorshipLevel ?? configuration.censorshipLevel
+  }
+
   return configuration
 }
 

packages/rum-core/src/boot/rumPublicApi.ts

@@ -30,6 +30,7 @@ import { startRum } from './startRum'
 export interface RumUserConfiguration extends UserConfiguration {
   applicationId: string
   beforeSend?: (event: RumEvent, context: RumEventDomainContext) => void | boolean
+  censorshipLevel?: string
 }
 
 export type RumPublicApi = ReturnType<typeof makeRumPublicApi>

packages/rum-recorder/src/boot/startRecording.ts

@@ -6,13 +6,16 @@ import { startSegmentCollection } from '../domain/segmentCollection'
 import { send } from '../transport/send'
 import { RawRecord, RecordType } from '../types'
 
+let configurationProviderRef: Configuration | undefined
+
 export function startRecording(
   lifeCycle: LifeCycle,
   applicationId: string,
   configuration: Configuration,
   session: RumSession,
   parentContexts: ParentContexts
 ) {
+  configurationProviderRef = configuration
   const { addRecord, stop: stopSegmentCollection } = startSegmentCollection(
     lifeCycle,
     applicationId,
@@ -36,6 +39,7 @@ export function startRecording(
     stop: () => {
       stopRecording()
       stopSegmentCollection()
+      configurationProviderRef = undefined
     },
   }
 }
@@ -47,3 +51,7 @@ export function trackViewEndRecord(lifeCycle: LifeCycle, addRawRecord: (record:
     })
   })
 }
+
+export function getRumRecorderConfig(): Configuration | undefined {
+  return configurationProviderRef
+}

packages/rum-recorder/src/constants.ts

@@ -1,3 +1,9 @@
+export const enum CensorshipLevel {
+  PRIVATE = 'PRIVATE',
+  FORMS = 'FORMS',
+  PUBLIC = 'PUBLIC',
+}
+
 export const enum InputPrivacyMode {
   NONE = 1,
   IGNORED,
@@ -12,3 +18,19 @@ export const PRIVACY_ATTR_VALUE_INPUT_MASKED = 'input-masked'
 export const PRIVACY_CLASS_HIDDEN = 'dd-privacy-hidden'
 export const PRIVACY_CLASS_INPUT_IGNORED = 'dd-privacy-input-ignored'
 export const PRIVACY_CLASS_INPUT_MASKED = 'dd-privacy-input-masked'
+
+export const PRIVACY_INPUT_MASK = '*****'
+
+export const FORM_PRIVATE_TAG_NAMES: { [tagName: string]: true } = {
+  INPUT: true,
+  LABEL: true,
+  SELECT: true,
+  TEXTAREA: true,
+  BUTTON: true,
+  FIELDSET: true,
+  DATALIST: true,
+  OUPUT: true,
+  OPTION: true,
+  OPTGROUP: true,
+  LEGEND: true,
+}

packages/rum-recorder/src/domain/record/privacy.ts

@@ -15,6 +15,8 @@ import {
 // to obfuscate.
 const PRIVACY_INPUT_TYPES_TO_IGNORE = ['email', 'password', 'tel']
 
+const MASKING_CHAR = '᙮'
+
 // Returns true if the given DOM node should be hidden. Ancestors
 // are not checked.
 export function nodeShouldBeHidden(node: Node): boolean {
@@ -89,3 +91,5 @@ function isElement(node: Node): node is Element {
 function isInputElement(elem: Element): elem is HTMLInputElement {
   return elem.tagName === 'INPUT'
 }
+
+export const censorText = (text: string) => text.replace(/[^\s]/g, MASKING_CHAR)

packages/rum-recorder/src/domain/record/serializationUtils.ts

@@ -1,5 +1,6 @@
 import { buildUrl } from '@datadog/browser-core'
-import { InputPrivacyMode } from '../../constants'
+import { CensorshipLevel, InputPrivacyMode, PRIVACY_INPUT_MASK } from '../../constants'
+import { getRumRecorderConfig } from '../../boot/startRecording'
 import { getNodeInputPrivacyMode, getNodeOrAncestorsInputPrivacyMode } from './privacy'
 import { SerializedNodeWithId } from './types'
 
@@ -125,5 +126,27 @@ export function getElementInputValue(element: Element, ancestorInputPrivacyMode?
 }
 
 export function maskValue(value: string) {
+  if (isFlagEnabled('privacy-by-default-poc')) {
+    return value.replace(/.+/, PRIVACY_INPUT_MASK)
+  }
   return value.replace(/./g, '*')
 }
+
+export function isFlagEnabled(feature: string): boolean {
+  const configuration = getRumRecorderConfig()
+  if (!configuration) {
+    return false
+  }
+  return configuration.isEnabled(feature)
+}
+
+export function getCensorshipLevel(): CensorshipLevel {
+  const configuration = getRumRecorderConfig()
+  if (!configuration) {
+    // Should never happen. Default to private
+    return CensorshipLevel.PRIVATE
+  }
+  // PENDING review from core package, core defines `censorshipLevel` as any string.
+  const level: CensorshipLevel = configuration.censorshipLevel as CensorshipLevel
+  return level
+}

packages/rum-recorder/src/domain/segmentCollection/segmentCollection.ts

@@ -153,7 +153,7 @@ export function doStartSegmentCollection(
     state = {
       status: SegmentCollectionStatus.SegmentPending,
       segment,
-      expirationTimeoutId: setTimeout(
+      expirationTimeoutId: window.setTimeout(
         monitor(() => {
           flushSegment('max_duration')
         }),