Replay is masking text from inputs

[dokgu]

Is there an existing issue for this?

• I have checked for existing issues https://github.com/getsentry/sentry-javascript/issues
• I have reviewed the documentation https://docs.sentry.io/
• I am using the latest SDK release https://github.com/getsentry/sentry-javascript/releases

How do you use Sentry?

Sentry Saas (sentry.io)

Which SDK are you using?

@sentry/nextjs

SDK Version

7.58.1

Framework Version

NextJS 13.4.9

Link to Sentry event

No response

SDK Setup

Sentry.init({
	dsn: process.env.NEXT_PUBLIC_SENTRY_DSN,

	// Adjust this value in production, or use tracesSampler for greater control
	tracesSampleRate: 1,

	// Setting this option to true will print useful information to the console while you're setting up Sentry.
	debug: false,

	replaysOnErrorSampleRate: 1.0,

	// This sets the sample rate to be 10%. You may want this to be 100% while
	// in development and sample at a lower rate in production
	replaysSessionSampleRate: 0.25,

	// You can remove this option if you're not planning to use the Sentry Session Replay feature:
	integrations: [
		new Sentry.Replay({
			// Additional Replay configuration goes in here, for example:
			maskAllText: false,
			blockAllMedia: false
		})
	],

	// Specify the environment this event belongs to
	environment: process.env.NODE_ENV,

	// Specify the release this event belongs to
	release: `${process.env.NEXT_PUBLIC_APP_NAME}-${process.env.NEXT_PUBLIC_APP_VERSION}`
});

Steps to Reproduce

1. Initialize Sentry and specify maskAllText: false for the session replay settings
2. Open a page with an input text box and enter some data. Throw an exception to trigger an error
3. Look at the session replay and the text entered on the input text box is masked

Expected Result

The text on the input text box is shown as plain text.

Actual Result

The text on the input text box is masked (********).

[ziyad-elabid-nw]

I don't understand why the maskAllText is always true in recordingOptions ?
I guess this is the source of the bug !
Why it shouldn't be : options.maskAllText value ?

[Lms24]

Hi, the default behaviour of Replay is to mask everything except if you opt-out of some specific elements or some types of elements. So to unmask all inputs (I'd recommend being careful here w.r.t PII, depending on what users can enter) you need to set mastAllInputs: false (see our privacy configuration docs).

Let us know if this solves your issue, thanks!

[dokgu]

Hi, the default behaviour of Replay is to mask everything except if you opt-out of some specific elements or some types of elements. So to unmask all inputs (I'd recommend being careful here w.r.t PII, depending on what users can enter) you need to set mastAllInputs: false (see our privacy configuration docs).

Let us know if this solves your issue, thanks!

Thank you. I was under the impression that maskAllText already did this for me. I didn't realize that there was another option for inputs. This fixed it for me. Thanks again!