getsentry / getsentry/sentry-javascript

`tel:`-links should probably be scrubbed

Open
#16,175 2 comments 0 reactions 0 assignees View on GitHub
Explore > Replays Improvement Replays
Dominant language
TypeScript
Stars
8.7k
Forks
1.8k
Avg merge
1d 17h
Merged PRs (30d)
515

Description

### Is there an existing issue for this?

- [x] I have checked for existing issues https://github.com/getsentry/sentry-javascript/issues
- [x] I have reviewed the documentation https://docs.sentry.io/
- [x] I am using the latest SDK release https://github.com/getsentry/sentry-javascript/releases

### How do you use Sentry?

Sentry Saas (sentry.io)

### Which SDK are you using?

@sentry/react

### SDK Version

9.10.1

### Framework Version

18.3.1

### Link to Sentry event

_No response_

### Reproduction Example/SDK Setup

_No response_

### Steps to Reproduce

User "dead clicked" a `tel:`-link, containing a real phone number.

### Expected Result

The phone number should be scrubbed, since phone numbers are generally PII(?)

I understand that we can manually do this scrubbing in `beforeSend`, but it seems like a generic issue.

### Actual Result

![Image](https://github.com/user-attachments/assets/2a9b34a2-216c-4620-a7fd-d19b499899f6)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.