openverse-api
openverse-api copied to clipboard
Configure sentry scrubbing for things like database DNS names
Problem
The database DNS name is not technically sensitive due to the current configuration of the production and development databases being secure. However, it's still nice not to have it floating around in Sentry in case some configuration changes that accidentally makes them vulnerable. Exposing the DNS names makes it just that much slightly easier for someone to exploit the vulnerability if one ever was introduced.
Description
It'd be nice to configure scrubbing for these values so that they don't show up in Sentry at all and never get stored there.
https://docs.sentry.io/product/data-management-settings/scrubbing/server-side-scrubbing/
Additional context
Prompted by @AetherUnbound noticing some of these in a Sentry issue.
Implementation
- [ ] 🙋 I would be interested in implementing this feature.