fix: payload host deny list (#1627)

PostHog · Dec 20, 2024 · 44f0bdb · 44f0bdb
1 parent f1cf456
commit 44f0bdb
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 3 deletions.
diff --git a/src/__tests__/extensions/replay/config.test.ts b/src/__tests__/extensions/replay/config.test.ts
@@ -210,13 +210,26 @@ describe('config', () => {
         describe('payloadHostDenyList', () => {
             it('uses a default when none provided', () => {
                 const networkOptions = buildNetworkRequestOptions(defaultConfig(), {})
-                expect(networkOptions.payloadHostDenyList).toEqual(['.lr-ingest.io', '.ingest.sentry.io'])
+                expect(networkOptions.payloadHostDenyList).toEqual([
+                    '.lr-ingest.io',
+                    '.ingest.sentry.io',
+                    '.clarity.ms',
+                    'analytics.google.com',
+                ])
             })
+
             it('adds to the default when deny list is provided', () => {
                 const networkOptions = buildNetworkRequestOptions(defaultConfig(), {
                     payloadHostDenyList: ['wat', 'huh'],
                 })
-                expect(networkOptions.payloadHostDenyList).toEqual(['wat', 'huh', '.lr-ingest.io', '.ingest.sentry.io'])
+                expect(networkOptions.payloadHostDenyList).toEqual([
+                    'wat',
+                    'huh',
+                    '.lr-ingest.io',
+                    '.ingest.sentry.io',
+                    '.clarity.ms',
+                    'analytics.google.com',
+                ])
             })
         })
     })

diff --git a/src/extensions/replay/config.ts b/src/extensions/replay/config.ts
@@ -48,7 +48,13 @@ export const defaultNetworkOptions: Required<NetworkRecordOptions> = {
         'resource',
     ],
     payloadSizeLimitBytes: 1000000,
-    payloadHostDenyList: ['.lr-ingest.io', '.ingest.sentry.io'],
+    payloadHostDenyList: [
+        '.lr-ingest.io',
+        '.ingest.sentry.io',
+        '.clarity.ms',
+        // NB no leading dot here
+        'analytics.google.com',
+    ],
 }
 
 const HEADER_DENY_LIST = [