How can we improve Application Insights?

Bug in sending events based on XMLHttpRequest.prototype.send

In Sender.ts, private _xhrSender(payload: string[], isAsync: boolean) method:

The line var xhr = new XMLHttpRequest(); relies on an existing xhr object may be overriden in some properties.

For instance, if I override XMLHttpRequest.prototype.send(), I could break the sending flow of events.

I saw this happen in JIRA (Atalassian) with appInsights.
This is a functionality issue as well as a security issue.

The appInsights JS code should obtain the original send() code or save the prototype.send at the start of the code (to at list avoid changes during runtime)

2 votes
Sign in
(thinking…)
Sign in with: Microsoft
Signed in as (Sign out)

We’ll send you updates on this idea

Itamar Azulay shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

1 comment

Sign in
(thinking…)
Sign in with: Microsoft
Signed in as (Sign out)
Submitting...
  • Guy Lewin commented  ·   ·  Flag as inappropriate

    Is there anything new with this? Our product relies on this solution and we're currently making workarounds

Feedback and Knowledge Base