Scrub sensitive params from Replay Start

[AbhiPrasad]

Discussed in #9865

^{Originally posted by bapjiws December 15, 2023}
Hi everyone,

Not sure if it's the right place to ask this, if not, I would appreciate any advice on where to do so 🙂

We have a mobile app that opens up a web app with a login link containing the login token and the user ID that we would love to filter out -- either from the event data or just skip sending the event itself. I've tried doing that via the beforeAddRecordingEvent hook, and I can filter the contents of the Page Load event, but the Replay Start remains unaffected.

We've also tried adding these two params to "Global Sensitive Fields" in Settings > Security & Privacy > DATA SCRUBBING > Global Sensitive Fields in our project settings, but that doesn't seem to change anything.

Also, the docs mention manually calling the replay.stop() method, but the page that link leads to doesn't have the #start-and-stop-recording anchor 😄 (see getsentry/sentry-docs#8881 instead)

Thanks so much in advance for any help! 🙏

[bapjiws]

@AbhiPrasad Is there any timeline on this issue? Just to manage the expectations 🙂 Thanks! 🙏

[bapjiws]

...also, your GitHub bot is called getsantry instead of getsentry, but maybe that was exactly the intention 😄

[AbhiPrasad]

Hey @bapjiws - sorry for the delay looking into this! Can you provide your SDK version, and if possible a link to the site running replay?

...also, your GitHub bot is called getsantry instead of getsentry, but maybe that was exactly the intention 😄

It totally was the intention 😄

[bapjiws]

@AbhiPrasad thanks for getting back! The last version of @sentry/browser I tried was 7.86.0 -- I suppose I should've mentioned that from the very start 🙂

[ryan953]

I noticed there was this mention in the original issue:

Also, the docs mention manually calling the replay.stop() method, but the page that link leads to doesn't have the #start-and-stop-recording anchor 😄

I've split that off into it's own ticket, edited this issue description, and i'll have a PR up right away.