Scrub sensitive params from Replay Start

[bapjiws]

Hi everyone,

Not sure if it's the right place to ask this, if not, I would appreciate any advice on where to do so 🙂

We have a mobile app that opens up a web app with a login link containing the login token and the user ID that we would love to filter out -- either from the event data or just skip sending the event itself. I've tried doing that via the beforeAddRecordingEvent hook, and I can filter the contents of the Page Load event, but the Replay Start remains unaffected.

We've also tried adding these two params to "Global Sensitive Fields" in Settings > Security & Privacy > DATA SCRUBBING > Global Sensitive Fields in our project settings, but that doesn't seem to change anything.

Also, the docs mention manually calling the replay.stop() method, but the page that link leads to doesn't have the #start-and-stop-recording anchor 😄

Thanks so much in advance for any help! 🙏

[AbhiPrasad]

I made a GH issue - feels like a bug we need to fix #9871