diff --git a/docs/platforms/apple/common/data-management/data-collected.mdx b/docs/platforms/apple/common/data-management/data-collected.mdx index a9ded0dea981b8..fbd87db0692a32 100644 --- a/docs/platforms/apple/common/data-management/data-collected.mdx +++ b/docs/platforms/apple/common/data-management/data-collected.mdx @@ -18,7 +18,7 @@ The category types and amount of data collected vary, depending on the integrati ## HTTP Headers -The HTTP Client Errors, which are enabled by default, send the HTTP headers of the failed request and response to Sentry. The SDK uses a [denylist](https://github.com/getsentry/sentry-cocoa/blob/main/Sources/Swift/Tools/HTTPHeaderSanitizer.swift) to filter out any headers that contain sensitive data. +The HTTP Client Errors, which are enabled by default, send the HTTP headers of the failed request and response to Sentry. The SDK uses a [denylist](https://github.com/getsentry/sentry-cocoa/blob/main/Sources/Swift/Core/Tools/HTTPHeaderSanitizer.swift) to filter out any headers that contain sensitive data. ## Users' IP Addresses @@ -34,6 +34,12 @@ Network breadcrumbs and HTTP Client Errors, both enabled by default, send a sani When you enable tracing, which is disabled per default, network tracing sends a sanitized URL for outgoing HTTP requests. +## Request Query String + +When tracing is enabled, the `http.query` span attribute captures the query string of outgoing HTTP requests and is **always sent to Sentry**. Depending on your application, this could contain PII data. + +Please note that `sendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `beforeSend` or similar hooks. + ## Source Context You can upload your source code to Sentry, which can then used to show the lines of code where an error happened in the Issue Details page, via the sentry-cli or the Sentry Fastlane plugin. diff --git a/docs/platforms/dart/common/data-management/data-collected.mdx b/docs/platforms/dart/common/data-management/data-collected.mdx index 31cb7493204217..f5c71c1e01d858 100644 --- a/docs/platforms/dart/common/data-management/data-collected.mdx +++ b/docs/platforms/dart/common/data-management/data-collected.mdx @@ -36,6 +36,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. +Please note that `sendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `beforeSend` or similar hooks. + ## Request Body The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below: diff --git a/docs/platforms/dart/guides/flutter/data-management/data-collected.mdx b/docs/platforms/dart/guides/flutter/data-management/data-collected.mdx index 6129e0ce1e4c96..f0f1a4d1197194 100644 --- a/docs/platforms/dart/guides/flutter/data-management/data-collected.mdx +++ b/docs/platforms/dart/guides/flutter/data-management/data-collected.mdx @@ -36,6 +36,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. +Please note that `sendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `beforeSend` or similar hooks. + ## Request Body The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below: diff --git a/docs/platforms/dotnet/common/data-management/data-collected.mdx b/docs/platforms/dotnet/common/data-management/data-collected.mdx index dc389452c5e065..cc86da6df54682 100644 --- a/docs/platforms/dotnet/common/data-management/data-collected.mdx +++ b/docs/platforms/dotnet/common/data-management/data-collected.mdx @@ -50,6 +50,8 @@ Depending on your application, this could contain PII data. The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. +Please note that `SendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `BeforeSend` or similar hooks. + ## Request Body diff --git a/docs/platforms/go/common/data-management/data-collected.mdx b/docs/platforms/go/common/data-management/data-collected.mdx index f28cfaf83cb856..b81e93a56cc1cd 100644 --- a/docs/platforms/go/common/data-management/data-collected.mdx +++ b/docs/platforms/go/common/data-management/data-collected.mdx @@ -35,3 +35,5 @@ The full request URL of incoming HTTP requests is **always sent to Sentry**. Dep ## Request Query String The full request query string of incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. + +Please note that `SendDefaultPII` is not considered for a request query string. We recommend utilizing your own redactions in `BeforeSend` or similar hooks. diff --git a/docs/platforms/java/common/data-management/data-collected.mdx b/docs/platforms/java/common/data-management/data-collected.mdx index 7b89882bfa0b22..378b58752514ce 100644 --- a/docs/platforms/java/common/data-management/data-collected.mdx +++ b/docs/platforms/java/common/data-management/data-collected.mdx @@ -50,6 +50,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. +Please note that `sendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `beforeSend` or similar hooks. + ## Request Body The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below: diff --git a/docs/platforms/javascript/common/data-management/data-collected/index.mdx b/docs/platforms/javascript/common/data-management/data-collected/index.mdx index 4cfc8c4fdaa100..5901722f8a1a18 100644 --- a/docs/platforms/javascript/common/data-management/data-collected/index.mdx +++ b/docs/platforms/javascript/common/data-management/data-collected/index.mdx @@ -50,6 +50,8 @@ The full request query string of outgoing and incoming HTTP requests is **always However, Sentry has some default [server-side data scrubbing](/security-legal-pii/scrubbing/server-side-scrubbing/) in place to remove sensitive data from the query string. For example, the `apiKey` and `token` query parameters are removed by default. +Please note that `sendDefaultPii` is not considered for a request query string. We recommend utilizing your own redactions in `beforeSend` or similar hooks. + ## Request Body By default, Sentry sends the size of the body content of incoming HTTP requests. This is inferred from the `content-length` header. Sentry does not send the request body itself on the client-side. diff --git a/docs/platforms/native/common/data-management/data-collected.mdx b/docs/platforms/native/common/data-management/data-collected.mdx index e6ef56a35fbaa1..1d710e8bdc3d2e 100644 --- a/docs/platforms/native/common/data-management/data-collected.mdx +++ b/docs/platforms/native/common/data-management/data-collected.mdx @@ -18,3 +18,9 @@ At the time of a crash, the stack of each thread is collected and sent to Sentry These files are not stored by default, but you can [enable Minidump Storage](/platforms/native/guides/minidumps/enriching-events/attachments/#store-minidumps-as-attachments) in the Sentry organization or project settings. The `inproc` backend stack walks solely in the client and thus only sends the resulting stack traces. + +## Request Query String + +The `url.query` span attribute captures the query string of HTTP requests and is **always sent to Sentry** when HTTP tracing is enabled. Depending on your application, this could contain PII data. + +Please note that there is no PII flag that gates the request query string. We recommend utilizing your own redactions in the `before_send` callback or similar hooks. diff --git a/docs/platforms/php/common/data-management/data-collected.mdx b/docs/platforms/php/common/data-management/data-collected.mdx index a118996a8ff77d..ae814c09b8cdf6 100644 --- a/docs/platforms/php/common/data-management/data-collected.mdx +++ b/docs/platforms/php/common/data-management/data-collected.mdx @@ -34,6 +34,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. +Please note that `send_default_pii` is not considered for a request query string. We recommend utilizing your own redactions in `before_send` or similar hooks. + ## Request Body The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below: diff --git a/docs/platforms/php/guides/laravel/data-management/data-collected.mdx b/docs/platforms/php/guides/laravel/data-management/data-collected.mdx index 92c5754fe01405..49436e70b3c986 100644 --- a/docs/platforms/php/guides/laravel/data-management/data-collected.mdx +++ b/docs/platforms/php/guides/laravel/data-management/data-collected.mdx @@ -41,6 +41,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. +Please note that `send_default_pii` is not considered for a request query string. We recommend utilizing your own redactions in `before_send` or similar hooks. + ## Request Body The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below: diff --git a/docs/platforms/php/guides/symfony/data-management/data-collected.mdx b/docs/platforms/php/guides/symfony/data-management/data-collected.mdx index 88ad6bd94ef4c9..eeb6515be1de18 100644 --- a/docs/platforms/php/guides/symfony/data-management/data-collected.mdx +++ b/docs/platforms/php/guides/symfony/data-management/data-collected.mdx @@ -41,6 +41,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. +Please note that `send_default_pii` is not considered for a request query string. We recommend utilizing your own redactions in `before_send` or similar hooks. + ## Request Body The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below: diff --git a/docs/platforms/python/data-management/data-collected.mdx b/docs/platforms/python/data-management/data-collected.mdx index b271e1e9a65e29..607803e57a4f71 100644 --- a/docs/platforms/python/data-management/data-collected.mdx +++ b/docs/platforms/python/data-management/data-collected.mdx @@ -44,6 +44,8 @@ The full request URL of outgoing and incoming HTTP requests is **always sent to The full request query string of outgoing and incoming HTTP requests is **always sent to Sentry**. Depending on your application, this could contain PII data. +Please note that `send_default_pii` is not considered for a request query string. We recommend utilizing your own redactions in `before_send` or similar hooks. + ## Request Body The request body of incoming HTTP requests can be sent to Sentry. Whether it's sent or not, depends on the type and size of request body as described below: