Skip to content

fix(phoenix): params scrubbing for LV#1048

Draft
solnic wants to merge 1 commit intorefa/extract-scrubberfrom
fix/liveview-params-scrubbing
Draft

fix(phoenix): params scrubbing for LV#1048
solnic wants to merge 1 commit intorefa/extract-scrubberfrom
fix/liveview-params-scrubbing

Conversation

@solnic
Copy link
Copy Markdown
Collaborator

@solnic solnic commented May 5, 2026

This extracts a scrubber API to a re-usable module and uses it in the live view too.

@solnic solnic force-pushed the fix/liveview-params-scrubbing branch from feeb823 to 66d3319 Compare May 5, 2026 10:18
@solnic solnic added this to the 13.0.2 milestone May 5, 2026
@solnic solnic force-pushed the fix/liveview-params-scrubbing branch from 66d3319 to 32c9ab8 Compare May 6, 2026 10:22
@solnic solnic changed the base branch from master to refa/extract-scrubber May 6, 2026 10:25
@solnic solnic force-pushed the refa/extract-scrubber branch from c9388da to ee7d131 Compare May 6, 2026 10:52
Sentry.LiveViewHook previously stored raw event params, handle_params
params, and URIs directly in breadcrumbs. Form submissions over the
LiveView WebSocket frequently contain passwords, tokens, and other
secrets, which were forwarded to Sentry unredacted.

The hook now passes breadcrumb data through Sentry.Scrubber.scrub_map/2
and URIs through Sentry.Scrubber.scrub_url/2 before adding them to the
breadcrumb trail. Users can override the scrubber by passing a
{module, function, args} tuple via on_mount opts, mirroring the
override mechanism already provided by Sentry.PlugCapture:

    on_mount {Sentry.LiveViewHook, scrubber: {MyApp.Scrubber, :scrub, []}}

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@solnic solnic mentioned this pull request May 6, 2026
@solnic solnic force-pushed the fix/liveview-params-scrubbing branch from 32c9ab8 to 50014e0 Compare May 6, 2026 11:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant