-
Notifications
You must be signed in to change notification settings - Fork 94
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat(scrubbing): Scrub span.data.http.query
with default scrubbers
#1889
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, we may add an additional test case that checks a more complex query, like api_token=123&process_id=123
-> api_token=[Filtered]&process_id=123
relay-general/src/protocol/types.rs
Outdated
#[cfg_attr(feature = "jsonschema", derive(JsonSchema))] | ||
pub struct HttpElement { | ||
#[metastructure(pii = "true")] | ||
pub query: Annotated<String>, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
span.data
is documented as free-form, so when a user sends {"http": {"query": {"not": "a string"}}}
, we should still accept it.
@iker-barriocanal could you check if the scrubbing still works when you change String
to Value
here?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Great catch! This is fixed in 03af9eb, and continues to work as expected.
* master: doc(py): Add changelog entries (#1900) fix(build): Run check when PR is ready for review (#1899) chore(project_local): Allow to follow symlinks for projects configs (#1891) ref(project): Skip serializing default fields (#1887) chore(build): Run changelog check for draft PRs (#1897) chore(sentry): Add environment config option (#1890) feat(scrubbing): Scrub `span.data.http.query` with default scrubbers (#1889)
Ref: #1855
span.data.http.query
may contain sensitive data, which is currently not scrubbed. This PR makes relay to scrub that field with default data scrubbers.