Repository navigation

Sentry: scrub file paths / PII / secrets from events before send (beforeSend/beforeBreadcrumb) - #5598

Merged

lawrencecchen merged 20 commits into

mainfrom

feat-sentry-scrub

Jun 8, 2026

Commits on Jun 8, 2026

Sentry: scrub file paths / PII / secrets from events before send

lawrencecchen
and
claude
committed
d960ea1
Sentry scrubber: drop user identity fields and cookies wholesale

lawrencecchen
and
claude
committed
f7fbe98
Sentry scrubber: cover exception mechanism data and debug-image paths

lawrencecchen
and
claude
committed
74d9371
Sentry scrubber: redact values under sensitive dictionary/header keys

lawrencecchen
and
claude
committed
5860017
Sentry scrubber: scrub all free-text fields; preserve only grouping allowlist

lawrencecchen
and
claude
committed
ecade1e
Sentry scrubber: split SentryRegexMatch into its own file

lawrencecchen
and
claude
committed
0a9d4fb
Sentry scrubber: key-aware tags + env-style secret-key assignments

lawrencecchen
and
claude
committed
4db5223
Sentry scrubber: scrub performance span description/data/tags

lawrencecchen
and
claude
committed
e031784
Sentry scrubber: unify free-text assignment markers with sensitive-key set

lawrencecchen
and
claude
committed
61b15ce
Sentry: disable performance tracing to close the un-scrubbable root-trace path

lawrencecchen
and
claude
committed
2e9cbb5
Sentry scrubber: scrub URL/object values that Sentry stringifies

lawrencecchen
and
claude
committed
62b4370
Sentry scrub: redact bare session=/sid= aliases (autoreview P1)

lawrencecchen
and
claude
committed
3634193
Sentry scrub: redact raw Data values (autoreview P2)

lawrencecchen
and
claude
committed
e9404f4
Sentry scrub: redact URL userinfo creds + exact home paths (autoreview P1+P2)

lawrencecchen
and
claude
committed
8090d1a
Sentry scrub: adopt maintained denylists (sentry-python keys + relay @common values)

lawrencecchen
and
claude
committed
8b51416
Sentry scrub: redact full URL userinfo when password contains unencoded @ (autoreview P1)

lawrencecchen
and
claude
committed
5cd67f1
Sentry scrub: redact full quoted secret values containing delimiters (autoreview P1)

lawrencecchen
and
claude
committed
2b19936
Sentry scrub: structured query-string redaction + bound home-path replace (autoreview P1+P2)

lawrencecchen
and
claude
committed
47a4185
Sentry scrub: treat sensitive context NAME as a redaction boundary (autoreview P2)

lawrencecchen
and
claude
committed
2d96e1a
Merge remote-tracking branch 'origin/main' into feat-sentry-scrub
lawrencecchen
committed
4fa9ba7

Navigation Menu

Repository navigation

Sentry: scrub file paths / PII / secrets from events before send (beforeSend/beforeBreadcrumb) - #5598

Sentry: scrub file paths / PII / secrets from events before send (beforeSend/beforeBreadcrumb)#5598
lawrencecchen merged 20 commits into
mainfrom
feat-sentry-scrub

Commits on Jun 8, 2026

Sentry: scrub file paths / PII / secrets from events before send

Sentry scrubber: drop user identity fields and cookies wholesale

Sentry scrubber: cover exception mechanism data and debug-image paths

Sentry scrubber: redact values under sensitive dictionary/header keys

Sentry scrubber: scrub all free-text fields; preserve only grouping allowlist

Sentry scrubber: split SentryRegexMatch into its own file

Sentry scrubber: key-aware tags + env-style secret-key assignments

Sentry scrubber: scrub performance span description/data/tags

Sentry scrubber: unify free-text assignment markers with sensitive-key set

Sentry: disable performance tracing to close the un-scrubbable root-trace path

Sentry scrubber: scrub URL/object values that Sentry stringifies

Sentry scrub: redact bare session=/sid= aliases (autoreview P1)

Sentry scrub: redact raw Data values (autoreview P2)

Sentry scrub: redact URL userinfo creds + exact home paths (autoreview P1+P2)

Sentry scrub: adopt maintained denylists (sentry-python keys + relay @common values)

Sentry scrub: redact full URL userinfo when password contains unencoded @ (autoreview P1)

Sentry scrub: redact full quoted secret values containing delimiters (autoreview P1)

Sentry scrub: structured query-string redaction + bound home-path replace (autoreview P1+P2)

Sentry scrub: treat sensitive context NAME as a redaction boundary (autoreview P2)

Merge remote-tracking branch 'origin/main' into feat-sentry-scrub