getsentry / sentry

Developer-first error tracking and performance monitoring
https://sentry.io
Other
39.28k stars 4.21k forks source link

[Data Scrubbing] Safe Fields As Event Context #44975

Open souredoutlook opened 1 year ago

souredoutlook commented 1 year ago

Problem Statement

If you want to override the default server side scrubbers you need to allow whole fields on a per project basis.

This is likely too risky in cases where the field is something broad like "message" or "body"

To solve for this - you can set Advanced Server Side Scrubbing to add some scrubbing back to the field, but casing this properly would likely be a brittle solution.

Solution Brainstorm

Allow customers to send an array of "safe fields" on a per event basis, similar to event context.

This would let you send a bare message like "Auth - Refreshing tokens" without worrying about redacted text or misconfiguring server side scrubbing.

getsantry[bot] commented 1 year ago

Assigning to @getsentry/support for routing, due by (sfo). ⏲️

getsantry[bot] commented 1 year ago

Routing to @getsentry/workflow for triage, due by (sfo). ⏲️