feat(replay): Default networkCaptureBodies to true - #6372
Merged
@sentry/warden / warden
completed
Jun 29, 2026
1 issue
Medium
Changing `networkCaptureBodies` default silently enables body capture for existing users - `packages/core/src/js/replay/mobilereplay.ts:229`
Existing users who have networkDetailAllowUrls configured but never set networkCaptureBodies will silently start recording request and response bodies after upgrading — this is a breaking behavioral change that can expose sensitive payloads without any user action.
Also found at:
packages/core/src/js/replay/mobilereplay.ts:395
4 skills analyzed
| Skill | Findings | Duration | Cost |
|---|---|---|---|
| security-review | 0 | 3.0s | $0.03 |
| code-review | 1 | 1m 7s | $0.35 |
| find-bugs | 0 | 1m 37s | $0.24 |
| gha-security-review | 0 | 3.1s | $0.02 |
⏱ 2m 51s · 243.4k in / 14.1k out · $0.64
Loading