ElectronBreadcrumbs integration captures window titles by default

[timfish]

Versions + Platform

• SDK version - @sentry/[email protected]

Description

cc @smeubank

The ElectronBreadcrumbs integration captures window titles by default and these may contain PII. This can currently be worked around by removing the integration but this level of data capture should be configurable.

[timfish]

While we work out how best to make this configurable you can remove window titles via the beforeSend hook:

Sentry.init({
  // other options...
  beforeSend: (event) => {
    for (const breadcrumb of event.breadcrumbs || []) {
      if (breadcrumb?.data?.title) {
        delete breadcrumb.data.title;
      }
    }
    return event;
  }
})

[timfish]

The obvious choice for a config option is the integration constructor:

init({
  dsn: '__DSN__',
  integrations: [new ElectronBreadcrumbs({ includeWindowTitles: true })]
})

[timfish]

A fix for this has been released in 3.0.7