d8999035c9
Co-Authored-By: Claude Code <noreply@anthropic.com>
69 lines
4.2 KiB
Python
69 lines
4.2 KiB
Python
import re
|
||
|
||
EVENT_NAMES = {"page_view", "page_stay", "sdk_loaded", "session_resume"}
|
||
SCHEMA_VERSION = 2 # 批级信缺省 = v1(旧SDK)
|
||
MAX_EVENTS_PER_BATCH = 50
|
||
MAX_PROP_KEYS = 32
|
||
MAX_STR_LEN = 500
|
||
MAX_PATH_LEN = 500
|
||
MAX_TITLE_LEN = 200
|
||
CLOCK_SKEW_LATE_SEC = 120 # 超过即标 late
|
||
CLOCK_SKEW_REJECT_SEC = 86400 # 超过即拒绝
|
||
SENSITIVE_KEY_PATTERNS = ("password", "passwd", "token", "secret", "card", "verif", "otp", "idcard")
|
||
SANITIZE_RULE_VERSION = "v2"
|
||
# 三轨制(spec §2.4,slug 安全线=32):①参数名黑名单整键删;②归因白名单提取保留;
|
||
# ③其余按值判别:纯数字≤10位或 slug≤32 保留,其余删。
|
||
URL_PARAM_DROP_PATTERNS = ("email", "phone", "mobile", "tel", "name", "user",
|
||
"token", "key", "password", "verif", "passwd", "idcard")
|
||
ATTRIBUTION_PARAM_WHITELIST = {"gclid", "gbraid", "wbraid", "fbclid", "msclkid",
|
||
"yclid", "gad_source", "gad_campaignid", "dclid"}
|
||
_SAFE_VALUE = re.compile(r"^(?:\d{1,10}|[A-Za-z0-9][A-Za-z0-9._-]{0,30})$") # slug≤32:32+连续字母数字视为token删
|
||
SESSION_IDLE_MS = 30 * 60 * 1000
|
||
BOT_UA_KEYWORDS = ("bot", "spider", "crawl", "slurp", "bingpreview", "headless", "lighthouse")
|
||
EVENT_PROP_WHITELIST = { # spec §9.1:未知字段拒绝。免费文本/任意属性不得入库
|
||
"page_view": {"referrer", "referrer_domain", "utm", "nav_type", "prerendering"},
|
||
"page_stay": {"active_ms", "path", "active_from", "active_to", "flush_reason", "measurement_version"},
|
||
"sdk_loaded": {"sdk_version", "build_id", "schema_version", "config_version"},
|
||
"session_resume": {"prev_session_id", "reason"},
|
||
}
|
||
MAX_PROP_DEPTH = 2
|
||
MAX_PROP_JSON_BYTES = 4096
|
||
EXTENDED_ENV_KEYS = { # SDK 扩展环境键白名单(Visitor.env_extra 快照,展示用):
|
||
"device_pixel_ratio", "viewport", "orientation", "max_touch_points", "device_memory", # 设备形态
|
||
"languages", "color_scheme", "standalone", # 偏好/宿主
|
||
"network_downlink", "network_rtt", "save_data", "wechat_version", # 网络/宿主
|
||
"device_model", "platform_version", "architecture", "bitness", # UA-CH 高熵
|
||
}
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# 来源归因规则库 v1(tracker/services/attribution.py 消费)。改规则必须 bump 版本号
|
||
# 并跑 recompute_attribution 重算历史——已落库分类带 rule_version 可追溯。
|
||
# ---------------------------------------------------------------------------
|
||
ATTRIBUTION_RULE_VERSION = "v1"
|
||
AI_REFERRAL_DOMAINS = { # AI 平台 → 显示名
|
||
"chatgpt.com": "ChatGPT", "perplexity.ai": "Perplexity",
|
||
"copilot.microsoft.com": "Copilot", "gemini.google.com": "Gemini",
|
||
"deepseek.com": "DeepSeek", "claude.ai": "Claude", "poe.com": "Poe", "you.com": "You",
|
||
}
|
||
SEARCH_ENGINE_DOMAINS = { # 引擎后缀/域名 → 显示名("google."/"yandex." 前缀匹配任意国家站 TLD)
|
||
"google.": "Google", "bing.com": "Bing", "baidu.com": "百度", "yandex.": "Yandex",
|
||
"duckduckgo.com": "DuckDuckGo", "yahoo.com": "Yahoo", "ecosia.org": "Ecosia",
|
||
"search.naver.com": "Naver", "search.brave.com": "Brave",
|
||
}
|
||
SEARCH_TERM_PARAMS = { # 引擎 → referrer URL 里的搜索词参数名(白名单提取)
|
||
"Bing": ["q"], "百度": ["wd", "word"], "DuckDuckGo": ["q"], "Yandex": ["text"],
|
||
"Ecosia": ["q"], "Yahoo": ["p"], "Brave": ["q"], "Naver": ["query"],
|
||
} # 注:Google 不提供,绝不虚构
|
||
PAID_CLICK_PARAMS = {"gclid": "Google Ads", "fbclid": "Meta Ads",
|
||
"msclkid": "Bing Ads", "yclid": "Yandex Ads"}
|
||
SOCIAL_DOMAINS = {
|
||
"t.co": "Twitter/X", "twitter.com": "Twitter/X", "x.com": "Twitter/X",
|
||
"facebook.com": "Facebook", "linkedin.com": "LinkedIn", "instagram.com": "Instagram",
|
||
"vk.com": "VK", "reddit.com": "Reddit", "pinterest.com": "Pinterest",
|
||
"telegram.me": "Telegram", "t.me": "Telegram",
|
||
}
|
||
INAPP_UA_MARKERS = {"MicroMessenger": "微信", "Line/": "Line", "FBAN": "Facebook",
|
||
"FBAV": "Facebook", "Instagram": "Instagram", "WhatsApp": "WhatsApp"}
|
||
CHANNELS = ("natural_search", "paid_search", "ai_referral", "social",
|
||
"in_app", "referral", "direct", "unknown")
|