Skip to content

Treat query string as pii too#1302

Merged
st0012 merged 3 commits intomasterfrom
fix-#1301
Mar 4, 2021
Merged

Treat query string as pii too#1302
st0012 merged 3 commits intomasterfrom
fix-#1301

Conversation

@st0012
Copy link
Copy Markdown
Contributor

@st0012 st0012 commented Feb 27, 2021

Query string could contain data like password reset token or payment token, which can be used to identify users as well. So it should also be excluded when send_default_pii is disabled.

Closes #1301

Query string could contain data like password reset token or payment
token, which can be used to identify users as well. So it should also be
excluded when `send_default_pii` is disabled.
@st0012 st0012 added this to the sentry-ruby-4.2.3 milestone Feb 27, 2021
@st0012 st0012 self-assigned this Feb 27, 2021
@codecov-io
Copy link
Copy Markdown

codecov-io commented Feb 27, 2021

Codecov Report

Merging #1302 (c6c29cd) into master (7630b72) will increase coverage by 0.58%.
The diff coverage is 100.00%.

Impacted file tree graph

@@            Coverage Diff             @@
##           master    #1302      +/-   ##
==========================================
+ Coverage   97.98%   98.57%   +0.58%     
==========================================
  Files         205      110      -95     
  Lines        8800     4977    -3823     
==========================================
- Hits         8623     4906    -3717     
+ Misses        177       71     -106     
Impacted Files Coverage Δ
sentry-ruby/spec/sentry/event_spec.rb 100.00% <ø> (ø)
sentry-ruby/lib/sentry/interfaces/request.rb 94.73% <100.00%> (ø)
...y/spec/sentry/interfaces/request_interface_spec.rb 99.10% <100.00%> (+0.05%) ⬆️
sentry-raven/spec/raven/client_state_spec.rb
...ntry-raven/spec/raven/utils/context_filter_spec.rb
sentry-raven/lib/raven/interfaces/http.rb
sentry-raven/lib/raven/client.rb
sentry-raven/lib/raven/processor.rb
sentry-raven/lib/raven/processor/post_data.rb
...-raven/spec/raven/integrations/delayed_job_spec.rb
... and 88 more

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 7630b72...c6c29cd. Read the comment docs.

@st0012 st0012 modified the milestones: sentry-ruby-4.2.3, 4.3.0 Mar 2, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

send_default_pii should also remove query params

2 participants