diff --git a/docs/platforms/apple/common/data-management/data-collected.mdx b/docs/platforms/apple/common/data-management/data-collected.mdx index a9ded0dea981b..fbd87db0692a3 100644 --- a/docs/platforms/apple/common/data-management/data-collected.mdx +++ b/docs/platforms/apple/common/data-management/data-collected.mdx @@ -18,7 +18,7 @@ The category types and amount of data collected vary, depending on the integrati ## HTTP Headers -The HTTP Client Errors, which are enabled by default, send the HTTP headers of the failed request and response to Sentry. The SDK uses a [denylist](https://github.com/getsentry/sentry-cocoa/blob/main/Sources/Swift/Tools/HTTPHeaderSanitizer.swift) to filter out any headers that contain sensitive data. +The HTTP Client Errors, which are enabled by default, send the HTTP headers of the failed request and response to Sentry. The SDK uses a [denylist](https://github.com/getsentry/sentry-cocoa/blob/main/Sources/Swift/Core/Tools/HTTPHeaderSanitizer.swift) to filter out any headers that contain sensitive data. ## Users' IP Addresses @@ -34,6 +34,12 @@ Network breadcrumbs and HTTP Client Errors, both enabled by default, send a sani When you enable tracing, which is disabled per default, network tracing sends a sanitized URL for outgoing HTTP requests. +## Request Query String + +When tracing is enabled, the `http.query` span attribute captures the query string of outgoing HTTP requests and is **always sent to Sentry**. Depending on your application, this could contain PII data. + +Please note that `sendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `beforeSend` or similar hooks. + ## Source Context You can upload your source code to Sentry, which can then used to show the lines of code where an error happened in the Issue Details page, via the sentry-cli or the Sentry Fastlane plugin. diff --git a/docs/platforms/dart/common/data-management/data-collected.mdx b/docs/platforms/dart/common/data-management/data-collected.mdx index 31cb749320421..f5c71c1e01d85 100644 --- a/docs/platforms/dart/common/data-management/data-collected.mdx +++ b/docs/platforms/dart/common/data-management/data-collected.mdx @@ -36,6 +36,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. +Please note that `sendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `beforeSend` or similar hooks. + ## Request Body The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below: diff --git a/docs/platforms/dart/guides/flutter/data-management/data-collected.mdx b/docs/platforms/dart/guides/flutter/data-management/data-collected.mdx index 6129e0ce1e4c9..f0f1a4d119719 100644 --- a/docs/platforms/dart/guides/flutter/data-management/data-collected.mdx +++ b/docs/platforms/dart/guides/flutter/data-management/data-collected.mdx @@ -36,6 +36,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. +Please note that `sendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `beforeSend` or similar hooks. + ## Request Body The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below: diff --git a/docs/platforms/dotnet/common/data-management/data-collected.mdx b/docs/platforms/dotnet/common/data-management/data-collected.mdx index dc389452c5e06..cc86da6df5468 100644 --- a/docs/platforms/dotnet/common/data-management/data-collected.mdx +++ b/docs/platforms/dotnet/common/data-management/data-collected.mdx @@ -50,6 +50,8 @@ Depending on your application, this could contain PII data. The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. +Please note that `SendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `BeforeSend` or similar hooks. + ## Request Body diff --git a/docs/platforms/go/common/data-management/data-collected.mdx b/docs/platforms/go/common/data-management/data-collected.mdx index f28cfaf83cb85..b81e93a56cc1c 100644 --- a/docs/platforms/go/common/data-management/data-collected.mdx +++ b/docs/platforms/go/common/data-management/data-collected.mdx @@ -35,3 +35,5 @@ The full request URL of incoming HTTP requests is **always sent to Sentry**. Dep ## Request Query String The full request query string of incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. + +Please note that `SendDefaultPII` is not considered for a request query string. We recommend utilizing your own redactions in `BeforeSend` or similar hooks. diff --git a/docs/platforms/java/common/data-management/data-collected.mdx b/docs/platforms/java/common/data-management/data-collected.mdx index 7b89882bfa0b2..378b58752514c 100644 --- a/docs/platforms/java/common/data-management/data-collected.mdx +++ b/docs/platforms/java/common/data-management/data-collected.mdx @@ -50,6 +50,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. +Please note that `sendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `beforeSend` or similar hooks. + ## Request Body The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below: diff --git a/docs/platforms/javascript/common/data-management/data-collected/index.mdx b/docs/platforms/javascript/common/data-management/data-collected/index.mdx index 4cfc8c4fdaa10..5901722f8a1a1 100644 --- a/docs/platforms/javascript/common/data-management/data-collected/index.mdx +++ b/docs/platforms/javascript/common/data-management/data-collected/index.mdx @@ -50,6 +50,8 @@ The full request query string of outgoing and incoming HTTP requests is **always However, Sentry has some default [server-side data scrubbing](/security-legal-pii/scrubbing/server-side-scrubbing/) in place to remove sensitive data from the query string. For example, the `apiKey` and `token` query parameters are removed by default. +Please note that `sendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `beforeSend` or similar hooks. + ## Request Body By default, Sentry sends the size of the body content of incoming HTTP requests. This is inferred from the `content-length` header. Sentry does not send the request body itself on the client-side. diff --git a/docs/platforms/native/common/data-management/data-collected.mdx b/docs/platforms/native/common/data-management/data-collected.mdx index e6ef56a35fbaa..1d710e8bdc3d2 100644 --- a/docs/platforms/native/common/data-management/data-collected.mdx +++ b/docs/platforms/native/common/data-management/data-collected.mdx @@ -18,3 +18,9 @@ At the time of a crash, the stack of each thread is collected and sent to Sentry These files are not stored by default, but you can [enable Minidump Storage](/platforms/native/guides/minidumps/enriching-events/attachments/#store-minidumps-as-attachments) in the Sentry organization or project settings. The `inproc` backend stack walks solely in the client and thus only sends the resulting stack traces. + +## Request Query String + +The `url.query` span attribute captures the query string of HTTP requests and is **always sent to Sentry** when HTTP tracing is enabled. Depending on your application, this could contain PII data. + +Please note that there is no PII flag that gates the request query string. We recommend utilizing your own redactions in the `before_send` callback or similar hooks. diff --git a/docs/platforms/php/common/data-management/data-collected.mdx b/docs/platforms/php/common/data-management/data-collected.mdx index a118996a8ff77..ae814c09b8cdf 100644 --- a/docs/platforms/php/common/data-management/data-collected.mdx +++ b/docs/platforms/php/common/data-management/data-collected.mdx @@ -34,6 +34,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. +Please note that `send_default_pii` is not considered for a request query string. We recommend utilizing your own redactions in `before_send` or similar hooks. + ## Request Body The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below: diff --git a/docs/platforms/php/guides/laravel/data-management/data-collected.mdx b/docs/platforms/php/guides/laravel/data-management/data-collected.mdx index 92c5754fe0140..49436e70b3c98 100644 --- a/docs/platforms/php/guides/laravel/data-management/data-collected.mdx +++ b/docs/platforms/php/guides/laravel/data-management/data-collected.mdx @@ -41,6 +41,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. +Please note that `send_default_pii` is not considered for a request query string. We recommend utilizing your own redactions in `before_send` or similar hooks. + ## Request Body The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below: diff --git a/docs/platforms/php/guides/symfony/data-management/data-collected.mdx b/docs/platforms/php/guides/symfony/data-management/data-collected.mdx index 88ad6bd94ef4c..eeb6515be1de1 100644 --- a/docs/platforms/php/guides/symfony/data-management/data-collected.mdx +++ b/docs/platforms/php/guides/symfony/data-management/data-collected.mdx @@ -41,6 +41,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. +Please note that `send_default_pii` is not considered for a request query string. We recommend utilizing your own redactions in `before_send` or similar hooks. + ## Request Body The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below: diff --git a/docs/platforms/python/data-management/data-collected.mdx b/docs/platforms/python/data-management/data-collected.mdx index b271e1e9a65e2..607803e57a4f7 100644 --- a/docs/platforms/python/data-management/data-collected.mdx +++ b/docs/platforms/python/data-management/data-collected.mdx @@ -44,6 +44,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. +Please note that `send_default_pii` is not considered for a request query string. We recommend utilizing your own redactions in `before_send` or similar hooks. + ## Request Body The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below: