Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ The category types and amount of data collected vary, depending on the integrati

## HTTP Headers

The <PlatformLink to="/configuration/http-client-errors">HTTP Client Errors</PlatformLink>, which are enabled by default, send the HTTP headers of the failed request and response to Sentry. The SDK uses a [denylist](https://github.com/getsentry/sentry-cocoa/blob/main/Sources/Swift/Tools/HTTPHeaderSanitizer.swift) to filter out any headers that contain sensitive data.
The <PlatformLink to="/configuration/http-client-errors">HTTP Client Errors</PlatformLink>, which are enabled by default, send the HTTP headers of the failed request and response to Sentry. The SDK uses a [denylist](https://github.com/getsentry/sentry-cocoa/blob/main/Sources/Swift/Core/Tools/HTTPHeaderSanitizer.swift) to filter out any headers that contain sensitive data.

## Users' IP Addresses

Expand All @@ -34,6 +34,12 @@ Network breadcrumbs and HTTP Client Errors, both enabled by default, send a sani

When you enable <PlatformLink to="/tracing">tracing</PlatformLink>, which is disabled per default, <PlatformLink to="/tracing/instrumentation/automatic-instrumentation/#network-tracking"> network tracing</PlatformLink> sends a sanitized URL for outgoing HTTP requests.

## Request Query String

When tracing is enabled, the `http.query` span attribute captures the query string of outgoing HTTP requests and is **always sent to Sentry**. Depending on your application, this could contain PII data.

Please note that `sendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `beforeSend` or similar hooks.

## Source Context

You can upload your source code to Sentry, which can then used to show the lines of code where an error happened in the Issue Details page, via the <PlatformLink to="/sourcecontext/#1-manually-upload-with-the-sentry-cli">sentry-cli</PlatformLink> or the <PlatformLink to="/sourcecontext/#2-fastlane-plugin">Sentry Fastlane plugin</PlatformLink>.
Expand Down
2 changes: 2 additions & 0 deletions docs/platforms/dart/common/data-management/data-collected.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -36,6 +36,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to

The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data.

Please note that `sendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `beforeSend` or similar hooks.

## Request Body

The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -36,6 +36,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to

The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data.

Please note that `sendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `beforeSend` or similar hooks.

## Request Body

The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -50,6 +50,8 @@ Depending on your application, this could contain PII data.

The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data.

Please note that `SendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `BeforeSend` or similar hooks.

<PlatformSection supported={["dotnet.aspnetcore", "dotnet.aspnet"]}>

## Request Body
Expand Down
2 changes: 2 additions & 0 deletions docs/platforms/go/common/data-management/data-collected.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -35,3 +35,5 @@ The full request URL of incoming HTTP requests is **always sent to Sentry**. Dep
## Request Query String

The full request query string of incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data.

Please note that `SendDefaultPII` is not considered for a request query string. We recommend utilizing your own redactions in `BeforeSend` or similar hooks.
2 changes: 2 additions & 0 deletions docs/platforms/java/common/data-management/data-collected.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -50,6 +50,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to

The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data.

Please note that `sendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `beforeSend` or similar hooks.

## Request Body

The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -50,6 +50,8 @@ The full request query string of outgoing and incoming HTTP requests is **always

However, Sentry has some default [server-side data scrubbing](/security-legal-pii/scrubbing/server-side-scrubbing/) in place to remove sensitive data from the query string. For example, the `apiKey` and `token` query parameters are removed by default.

Please note that `sendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `beforeSend` or similar hooks.

## Request Body

By default, Sentry sends the size of the body content of incoming HTTP requests. This is inferred from the `content-length` header. Sentry does not send the request body itself on the client-side.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -18,3 +18,9 @@ At the time of a crash, the stack of each thread is collected and sent to Sentry
These files are not stored by default, but you can [enable Minidump Storage](/platforms/native/guides/minidumps/enriching-events/attachments/#store-minidumps-as-attachments) in the Sentry organization or project settings.

The `inproc` backend stack walks solely in the client and thus only sends the resulting stack traces.

## Request Query String

The `url.query` span attribute captures the query string of HTTP requests and is **always sent to Sentry** when HTTP tracing is enabled. Depending on your application, this could contain PII data.

Please note that there is no PII flag that gates the request query string. We recommend utilizing your own redactions in the `before_send` callback or similar hooks.
2 changes: 2 additions & 0 deletions docs/platforms/php/common/data-management/data-collected.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to

The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data.

Please note that `send_default_pii` is not considered for a request query string. We recommend utilizing your own redactions in `before_send` or similar hooks.

## Request Body

The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -41,6 +41,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to

The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data.

Please note that `send_default_pii` is not considered for a request query string. We recommend utilizing your own redactions in `before_send` or similar hooks.

## Request Body

The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -41,6 +41,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to

The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data.

Please note that `send_default_pii` is not considered for a request query string. We recommend utilizing your own redactions in `before_send` or similar hooks.

## Request Body

The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below:
Expand Down
2 changes: 2 additions & 0 deletions docs/platforms/python/data-management/data-collected.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -44,6 +44,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to

The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data.

Please note that `send_default_pii` is not considered for a request query string. We recommend utilizing your own redactions in `before_send` or similar hooks.

## Request Body

The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below:
Expand Down
Loading