Release 1.16.15

Author: shengyonggen

CHANGELOG.md

@@ -1,3 +1,8 @@
+## 1.16.15 (2021-05-7)
+1. 修复
+    - 修复不采集 `$WebStay` 事件时，触达率图错误提示不准确问题
+    - 修复 `XSS` 问题
+
 ## 1.16.14 (2021-04-30)
 1. 新增
     - 新增参数配置 `is_secure_cookie`

core/sensorsdata.amd.min.js

@@ -1,6 +1,6 @@
 {
   "name": "sa-sdk-javascript",
-  "version": "1.16.14",
+  "version": "1.16.15",
   "description": "official sensorsdata javascript sdk",
   "main": "sensorsdata.min.js",
   "scripts": {

core/sensorsdata.es6.min.js

@@ -9248,8 +9248,12 @@
             obj.success(data);
           },
           error: function(res) {
-            sd.log('AJAX 请求失败，转换为 JSONP 请求', res);
-            _this.jsonp(obj);
+            if (_.isObject(res) && res.error) {
+              obj.error(res);
+            } else {
+              sd.log('AJAX 请求失败，转换为 JSONP 请求', res);
+              _this.jsonp(obj);
+            }
           },
           timeout: 5000
         });
@@ -9398,7 +9402,7 @@
 
   window.sa_jssdk_heatmap_render = function(se, data, type, url) {
     sd = se;
-    sd.heatmap_version = '1.16.14';
+    sd.heatmap_version = '1.16.15';
     _ = sd._;
 
     _.bindReady = function(fn, win) {

core/sensorsdata.min.js

@@ -2970,7 +2970,7 @@
       };
 
       _.secCheck = {
-        isHTTPURL: function(str) {
+        isHttpUrl: function(str) {
           if (typeof str !== 'string') return false;
           var _regex = /^https?:\/\/.+/;
           if (_regex.test(str) === false) {
@@ -2981,7 +2981,7 @@
         },
         removeScriptProtocol: function(str) {
           if (typeof str !== 'string') return '';
-          var _regex = /^\s*javascript:/i;
+          var _regex = /^\s*javascript/i;
           while (_regex.test(str)) {
             str = str.replace(_regex, '');
           }
@@ -3247,7 +3247,7 @@
 
     sd.setInitVar = function() {
       sd._t = sd._t || 1 * new Date();
-      sd.lib_version = '1.16.14';
+      sd.lib_version = '1.16.15';
       sd.is_first_visitor = false;
       sd.source_channel_standard = 'utm_source utm_medium utm_campaign utm_content utm_term';
     };
@@ -4117,9 +4117,10 @@
               }
               if (event.data.data.userURL && location.search.match(/sa-visual-mode=true/)) {
                 function validUrl(value) {
-                  if (value) {
+                  if (_.secCheck.isHttpUrl(value)) {
                     return _.secCheck.removeScriptProtocol(value);
                   } else {
+                    sd.log('可视化模式检测 URL 失败');
                     return false;
                   }
                 }
@@ -4151,7 +4152,7 @@
                 source: 'sa-web-sdk',
                 type: 'v-is-vtrack',
                 data: {
-                  sdkversion: '1.16.14'
+                  sdkversion: '1.16.15'
                 }
               },
               '*'

heatmap.min.js

@@ -2964,7 +2964,7 @@ if (!String.prototype.replaceAll) {
   };
 
   _.secCheck = {
-    isHTTPURL: function(str) {
+    isHttpUrl: function(str) {
       if (typeof str !== 'string') return false;
       var _regex = /^https?:\/\/.+/;
       if (_regex.test(str) === false) {
@@ -2975,7 +2975,7 @@ if (!String.prototype.replaceAll) {
     },
     removeScriptProtocol: function(str) {
       if (typeof str !== 'string') return '';
-      var _regex = /^\s*javascript:/i;
+      var _regex = /^\s*javascript/i;
       while (_regex.test(str)) {
         str = str.replace(_regex, '');
       }
@@ -3241,7 +3241,7 @@ sd.setPreConfig = function(sa) {
 
 sd.setInitVar = function() {
   sd._t = sd._t || 1 * new Date();
-  sd.lib_version = '1.16.14';
+  sd.lib_version = '1.16.15';
   sd.is_first_visitor = false;
   sd.source_channel_standard = 'utm_source utm_medium utm_campaign utm_content utm_term';
 };
@@ -4111,9 +4111,10 @@ sd.detectMode = function() {
           }
           if (event.data.data.userURL && location.search.match(/sa-visual-mode=true/)) {
             function validUrl(value) {
-              if (value) {
+              if (_.secCheck.isHttpUrl(value)) {
                 return _.secCheck.removeScriptProtocol(value);
               } else {
+                sd.log('可视化模式检测 URL 失败');
                 return false;
               }
             }
@@ -4145,7 +4146,7 @@ sd.detectMode = function() {
             source: 'sa-web-sdk',
             type: 'v-is-vtrack',
             data: {
-              sdkversion: '1.16.14'
+              sdkversion: '1.16.15'
             }
           },
           '*'

package.json

@@ -2972,7 +2972,7 @@
       };
 
       _.secCheck = {
-        isHTTPURL: function(str) {
+        isHttpUrl: function(str) {
           if (typeof str !== 'string') return false;
           var _regex = /^https?:\/\/.+/;
           if (_regex.test(str) === false) {
@@ -2983,7 +2983,7 @@
         },
         removeScriptProtocol: function(str) {
           if (typeof str !== 'string') return '';
-          var _regex = /^\s*javascript:/i;
+          var _regex = /^\s*javascript/i;
           while (_regex.test(str)) {
             str = str.replace(_regex, '');
           }
@@ -3249,7 +3249,7 @@
 
     sd.setInitVar = function() {
       sd._t = sd._t || 1 * new Date();
-      sd.lib_version = '1.16.14';
+      sd.lib_version = '1.16.15';
       sd.is_first_visitor = false;
       sd.source_channel_standard = 'utm_source utm_medium utm_campaign utm_content utm_term';
     };
@@ -4119,9 +4119,10 @@
               }
               if (event.data.data.userURL && location.search.match(/sa-visual-mode=true/)) {
                 function validUrl(value) {
-                  if (value) {
+                  if (_.secCheck.isHttpUrl(value)) {
                     return _.secCheck.removeScriptProtocol(value);
                   } else {
+                    sd.log('可视化模式检测 URL 失败');
                     return false;
                   }
                 }
@@ -4153,7 +4154,7 @@
                 source: 'sa-web-sdk',
                 type: 'v-is-vtrack',
                 data: {
-                  sdkversion: '1.16.14'
+                  sdkversion: '1.16.15'
                 }
               },
               '*'