feat(aiohttp): Apply data_collection filtering to URL query strings#6833
Merged
@sentry/warden / warden: find-bugs
completed
Jul 22, 2026 in 0s
1 issue
find-bugs: Found 1 issue (1 medium)
Medium
Legacy client span leaks unfiltered query strings when data_collection is configured - `sentry_sdk/integrations/aiohttp.py:7`
The legacy (non-streaming) client span path stores the raw query string without applying _apply_data_collection_filtering_to_query_string, so sensitive parameters bypass the user-configured data_collection filters.
⏱ 20m 15s · 1.9M in / 65.1k out · $0.61
Annotations
Check warning on line 7 in sentry_sdk/integrations/aiohttp.py
sentry-warden / warden: find-bugs
Legacy client span leaks unfiltered query strings when data_collection is configured
The legacy (non-streaming) client span path stores the raw query string without applying `_apply_data_collection_filtering_to_query_string`, so sensitive parameters bypass the user-configured `data_collection` filters.
Loading