Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

ActiveStorage subscriber can leak potential sensitive/pii fields #2497

Open
sl0thentr0py opened this issue Dec 16, 2024 · 0 comments · May be fixed by #2589
Open

ActiveStorage subscriber can leak potential sensitive/pii fields #2497

sl0thentr0py opened this issue Dec 16, 2024 · 0 comments · May be fixed by #2589
Assignees
@sl0thentr0py
Labels
sentry-rails

Comments

@sl0thentr0py
Copy link
Member

sl0thentr0py commented Dec 16, 2024 •
edited
Loading

For instance, the key here
https://github.com/rails/rails/blob/a8709e6ea26eca73a652af4fdd0a9f7db5352af4/guides/source/active_support_instrumentation.md?plain=1#L870

Guard these behind send_default_pii
# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees

@sl0thentr0py sl0thentr0py

Labels
sentry-rails
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Only expose ActiveStorage keys on span data if send_default_pii is on getsentry/sentry-ruby
1 participant
@sl0thentr0py