feat: Do not report ajax nodes in session traces if in deny list (#750)

Co-authored-by: Chunwai Li <[email protected]>

Author: metal-messiah

src/features/ajax/aggregate/index.js

@@ -81,8 +81,6 @@ export class Aggregate extends AggregateBase {
         hash = stringify([params.status, params.host, params.pathname])
       }
 
-      handle('bstXhrAgg', ['xhr', hash, params, metrics], undefined, FEATURE_NAMES.sessionTrace, ee)
-
       // store as metric
       aggregator.store('xhr', hash, params, metrics)
 
@@ -98,6 +96,8 @@ export class Aggregate extends AggregateBase {
         return
       }
 
+      handle('bstXhrAgg', ['xhr', hash, params, metrics], undefined, FEATURE_NAMES.sessionTrace, ee)
+
       var xhrContext = this
 
       var event = {

tests/functional/stn/ajax.test.js

@@ -94,7 +94,7 @@ testDriver.test('session trace ajax deny list', function (t, browser, router) {
       const body = result.request.body
       const harvestBody = body.res
       const loadNodes = harvestBody.filter(function (node) { return node.t === 'ajax' })
-      t.ok(loadNodes.length > 0, 'XMLHttpRequest nodes captured even with ajax deny list')
+      t.ok(loadNodes.length === 0, 'XMLHttpRequest nodes are not captured with ajax deny list')
 
       t.end()
     }).catch(fail)