dcramer/raven — Issue #70: SanitizeProcessor doesn't sanitize POST bodies
Author: gtaylor
Created: 2012-02-22 17:23:10+00:00
State: open

Looks like the SanitizeProcessor isn't sanitizing the values seen under the Request section beside "Body:". There was a recent commit that was aimed at fixing this by adding 'body' to the filter_http method, but this doesn't appear to work.

This could be a pretty severe vulnerability for anyone using Raven/Sentry for commerce sites, as customer credit card data could be stored.