All http header, query string and body parameters are shown [Filtered] by data scrubber

1

Today after renaming organisation name, project name and modifying alert email subject, I noticed server-side data scrubbing doesn’t function properly as expected and it worked in the past. It shows all http header, query string and body parameters “[Filtered]” which is abnormal behaviour.

Headers:
  Content-Type: [Filtered]
  User-Agent: [Filtered]

Query String:
  q: [Filtered]

Body: "cosName=[Filtered]&address=[Filtered]&password=[Filtered]&firstName=[Filtered]&lastName=[Filtered]"

Other relevant configuration is: Use Default Scrubbers option is enabled, Additional sensitive fields and Safe fields are empty. Sentry version is 8.14.0.dev0

2

What are the values of your scrubber settings? You can find these in your general configuration in your project settings, they look like this:

Screenshot 2017-02-27 16.45.45.png1892×1178 76.3 KB

Are you using self-hosted Sentry, or are you on sentry.io?

3

We are using sentry.io, and as explained above:

  • “Data Scrubber” is enabled
  • “Use Default Scrubbers” is enabled
  • “Additional sensitive fields” is empty
  • “Safe fields” is empty

Everything was fine for couple of months till yesterday when I modified organisation name, project name and alert email subject.

Also, we have another project in Sentry.io which is used only for development and testing purposes, we experienced same issue when I ran our own dummy events generator.

4

This same thing started happening for us today after performing several org.edits. Everything in tracebacks/additional data sections show as [filtered]. It appears to effect all projects/teams.

5

Sorry about that @mehretaban, I read through your post too quickly (end of the day and all that) and totally missed those details, but thanks for clarifying. We identified the the issue and have a committed a fix here.

6

Thanks for addressing the issue. May I know what is its fix version and release date (deployed into Senty.io) ?

7

It was deployed minutes after it was merged.