Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@amplitude/plugin-session-replay-browser
Advanced tools
Official Browser SDK plugin for session replay
This package is published on NPM registry and is available to be installed using npm and yarn.
# npm
npm install @amplitude/plugin-session-replay-browser
# yarn
yarn add @amplitude/plugin-session-replay-browser
This plugin works on top of Amplitude Browser SDK and adds session replay features to built-in features. To use this plugin, you need to install @amplitude/analytics-browser
version v1.9.1
or later.
This plugin requires that default tracking for sessions is enabled. If default tracking for sessions is not enabled in the config, the plugin will automatically enable it.
@amplitude/analytics-browser
@amplitude/plugin-session-replay-browser
import * as amplitude from '@amplitude/analytics-browser';
import { sessionReplayPlugin } from '@amplitude/plugin-session-replay-browser';
The plugin must be registered with the amplitude instance via the following code. The plugin accepts an optional parameter which is an Object
to configure the plugin based on your use case.
amplitude.init(API_KEY);
const sessionReplayTracking = sessionReplayPlugin({
sampleRate: undefined
});
Name | Type | Default | Required | Description |
---|---|---|---|---|
sampleRate | number | undefined | Yes | Use this option to control how many sessions will be selected for replay collection. A selected session will be collected for replay, while sessions that are not selected will not. The number should be a decimal between 0 and 1, ie 0.01 , representing the fraction of sessions you would like to have randomly selected for replay collection. Over a large number of sessions, 0.01 would select 1% of those sessions. |
privacyConfig | object | undefined | No | Supports advanced masking configs with CSS selectors. |
debugMode | boolean | false | No | Adds additional debug event property to help debug instrumentation issues (such as mismatching apps). Only recommended for debugging initial setup, and not recommended for production. |
amplitude.add(sessionReplayTracking);
By default, the session replay will mask all inputs, meaning the text in inputs will appear in a session replay as asterisks: ***
. You may require more specific masking controls based on your use case, so we offer the following controls:
In your application code, add the class .amp-unmask
to any input whose text you'd like to have unmasked in the replay. In the session replay, it will be possible to read the exact text entered into an input with this class, the text will not be converted to asterisks.
In your application code, add the class .amp-mask
to any non-input element whose text you'd like to have masked from the replay. The text in the element, as well as it's children, will all be converted to asterisks.
In your application code, add the class .amp-block
to any element you would like to have blocked from the collection of the replay. The element will appear in the replay as a placeholder with the same dimensions.
In the SDK initialization code, you can configure the SDK to block elements based on CSS selectors.
const sessionReplayTracking = sessionReplayPlugin({
sampleRate: 0.01,
privacyConfig: {
blockSelector: ['.ignoreClass', '#ignoreId']
}
});
Since the Session Replay plugin only records and tags events when the page is in focus, this can sometimes be problematic when developing locally with the browser console open. If you are having issues with the replays not showing up (while your quota usage going up). Try turning setting debugMode:true
to see if that helps with the issue.
FAQs
<b
The npm package @amplitude/plugin-session-replay-browser receives a total of 58,483 weekly downloads. As such, @amplitude/plugin-session-replay-browser popularity was classified as popular.
We found that @amplitude/plugin-session-replay-browser demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.