PII Not Being Scrubbed from Spans Java/Android SDK
Open
Nobody has claimed this yet.
Android
Bug
Product Area: Explore
Spans
- Dominant language
- Python
- Stars
- 44.8k
- Forks
- 4.9k
- Avg merge
- 21h 23m
- Merged PRs (30d)
- 607
Description
Environment
SaaS (https://sentry.io/)
Steps to Reproduce
- add advanced data scrubbing selectors for geo location:
$span.attributes.'user.geo.country_code'.value or
$span.attributes.'user.geo.country_code'.value ||$span.attributes.'user.geo.city'.value ||$span.attributes.'user.geo.region'.value - send transactions with user.geo
- Check spans for the geo location and you will see that this PII has not been removed.
Expected Result
Geo location PII to be removed from spans.
Actual Result
Spans are being ingested with user geo location.
Product Area
Explore
Link
daniels-sentry-org1
DSN
https://3cf9ad76529b3d7e557ce2bc565e4c56@o4511652932616192.ingest.de.sentry.io/4511704152473680
Version
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No source files or tests are named. Start by reproducing the advanced data-scrubbing selectors against Java/Android transactions with user.geo span attributes, then trace how those selectors are applied during span ingestion. Done means country, city, and region values are absent from ingested spans while the reported selectors continue to work.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- android, java, python
- Domain
- backend, observability-sre, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 55/100