feat(node): Add maxIncomingRequestBodySize - #16225

Merged
s1gr1d merged 4 commits into
developfrom
sig/maxRequestBodySize
May 15, 2025
Merged

feat(node): Add maxIncomingRequestBodySize#16225
s1gr1d merged 4 commits into
developfrom
sig/maxRequestBodySize

Conversation

@s1gr1d

@s1gr1ds1gr1d commented May 7, 2025

Copy link
Copy Markdown
Member

Adds maxIncomingRequestBodySize to the Node httpIntegration.
The setting controls the maximum size of HTTP request bodies attached to events.

There is the option maxRequestBodySize (docs) in other SDKs, but to be more specific, this is named with incoming.

Available options:

  • 'none': No request bodies will be attached
  • 'small': Request bodies up to 1,000 bytes will be attached
  • 'medium': Request bodies up to 10,000 bytes will be attached (default)
  • 'always': Request bodies will always be attached (up to 1 MB)

closes#16179

@s1gr1d
s1gr1dforce-pushed the sig/maxRequestBodySize branch from 560976f to 7a21af7CompareMay 7, 2025 17:17
@s1gr1d
s1gr1d requested a review from mydeaMay 7, 2025 17:18
@github-actions

github-actionsBot commented May 7, 2025

Copy link
Copy Markdown
Contributor

size-limit report 📦

PathSize% ChangeChange
@sentry/browser23.96 kB--
@sentry/browser - with treeshaking flags23.62 kB--
@sentry/browser (incl. Tracing)38.21 kB--
@sentry/browser (incl. Tracing, Replay)76.32 kB--
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags69.35 kB--
@sentry/browser (incl. Tracing, Replay with Canvas)81.09 kB--
@sentry/browser (incl. Tracing, Replay, Feedback)93.18 kB--
@sentry/browser (incl. Feedback)40.76 kB--
@sentry/browser (incl. sendFeedback)28.7 kB--
@sentry/browser (incl. FeedbackAsync)33.58 kB--
@sentry/react25.77 kB--
@sentry/react (incl. Tracing)40.21 kB--
@sentry/vue28.34 kB--
@sentry/vue (incl. Tracing)40 kB--
@sentry/svelte23.99 kB--
CDN Bundle25.17 kB--
CDN Bundle (incl. Tracing)38.23 kB--
CDN Bundle (incl. Tracing, Replay)74.11 kB--
CDN Bundle (incl. Tracing, Replay, Feedback)79.54 kB--
CDN Bundle - uncompressed73.44 kB--
CDN Bundle (incl. Tracing) - uncompressed113.15 kB--
CDN Bundle (incl. Tracing, Replay) - uncompressed227.11 kB--
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed239.93 kB--
@sentry/nextjs (client)41.86 kB--
@sentry/sveltekit (client)38.68 kB--
@sentry/node158.08 kB+0.06%+83 B 🔺
@sentry/node - without tracing97.97 kB+0.09%+79 B 🔺
@sentry/aws-serverless123.33 kB+0.07%+83 B 🔺

View base workflow run

*
* @default 'medium'
*/
maxRequestBodySize?: 'none' | 'small' | 'medium' | 'always';

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should we rename this to maxIncomingRequestBodySize? It is not clear right now that this only applies to incoming requests, not outgoing ones 😅

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I got the name from the general Sentry docs: https://develop.sentry.dev/sdk/expected-features/#attaching-request-body-in-server-sdks

To be uniform with other SDKs, it would be beneficial to keep the name, but I agree that it would be clearer with incoming. At least, the information is available in the JSDoc 😅

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we don't need to have the same name, if we think something else is better :) maybe you could also check with other sdk folks, if this also applies to outgoing requests in other implementations or just to incoming?

function patchRequestToCaptureBody(
req: http.IncomingMessage,
isolationScope: Scope,
maxRequestBodySize: 'none' | 'small' | 'medium' | 'always',

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

l: We could actually type this to omit none as allowed value, and then avoid the further check in here, as we actually guard agains this already before calling this?

if (event === 'data') {
DEBUG_BUILD && logger.log(INSTRUMENTATION_NAME, 'Handling request.on("data")');
if (DEBUG_BUILD) {
logger.log(INSTRUMENTATION_NAME, 'Handling request.on("data")');

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

l: Let's combine these into a single log line, e.g. Handling request.on("data") with maximum request body size ...

@s1gr1ds1gr1d changed the title feat(node): Add maxRequestBodySizefeat(node): Add maxIncomingRequestBodySizeMay 13, 2025
@s1gr1d
s1gr1d requested a review from mydeaMay 13, 2025 14:57
*
* @default 'medium'
*/
maxRequestBodySize?: 'none' | 'small' | 'medium' | 'always';

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

m: Just to confirm - you're still going to change the name here?

@s1gr1ds1gr1dMay 14, 2025

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ah thanks - seems like my push of the commit where I changed the naming didn't get through 😄

await runner.completed();
});

test('does not capture any request bodies with "none" setting and "ignoreIncomingRequestBody"', async () => {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

does it make sense to combine these two? should we not combine the filter function with e.g. always setting? 🤔

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I added this test because I was actually running into an issue 😄
I had a logic problem in the if condition and it was sending the request body.

It's basically testing that the if condition is correct: https://github.com/getsentry/sentry-javascript/pull/16225/files#diff-964fee03880b5de6d711130f1ad4111d04e194bc066ea1725b4e6b7c1c722a42R266

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

then this is great :D

@s1gr1d
s1gr1d requested a review from mydeaMay 15, 2025 07:45
@s1gr1d
s1gr1d merged commit 12c90d1 into developMay 15, 2025
@s1gr1d
s1gr1d deleted the sig/maxRequestBodySize branch May 15, 2025 14:00
s1gr1d added a commit to getsentry/sentry-docs that referenced this pull request May 20, 2025
…mingRequestBody` (#13698)
## DESCRIBE YOUR PR
Documents `ignoreIncomingRequestBody `:
getsentry/sentry-javascript#15959
Documents `maxIncomingRequestBodySize`:
getsentry/sentry-javascript#16225
## IS YOUR CHANGE URGENT? Help us prioritize incoming PRs by letting us know when the change needs
to go live.
- [ ] Urgent deadline (GA date, etc.): <!-- ENTER DATE HERE -->
- [ ] Other deadline: <!-- ENTER DATE HERE -->
- [x] None: Not urgent, can wait up to 1 week+
## SLA
- Teamwork makes the dream work, so please add a reviewer to your PRs.
- Please give the docs team up to 1 week to review your PR unless you've
added an urgent due date to it.
Thanks in advance for your help!
## PRE-MERGE CHECKLIST
*Make sure you've checked the following before merging your changes:*
- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)
bitsandfoxes pushed a commit to getsentry/sentry-docs that referenced this pull request Jul 3, 2025
…mingRequestBody` (#13698)
## DESCRIBE YOUR PR
Documents `ignoreIncomingRequestBody `:
getsentry/sentry-javascript#15959
Documents `maxIncomingRequestBodySize`:
getsentry/sentry-javascript#16225
## IS YOUR CHANGE URGENT? Help us prioritize incoming PRs by letting us know when the change needs
to go live.
- [ ] Urgent deadline (GA date, etc.): <!-- ENTER DATE HERE -->
- [ ] Other deadline: <!-- ENTER DATE HERE -->
- [x] None: Not urgent, can wait up to 1 week+
## SLA
- Teamwork makes the dream work, so please add a reviewer to your PRs.
- Please give the docs team up to 1 week to review your PR unless you've
added an urgent due date to it.
Thanks in advance for your help!
## PRE-MERGE CHECKLIST
*Make sure you've checked the following before merging your changes:*
- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Node] Add maxRequestBodySize to SentryHttpIntegration

3 participants

@s1gr1d@mydea@Lms24
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
Skip to content

feat(node): Add maxIncomingRequestBodySize - #16225

Merged
s1gr1d merged 4 commits into
developfrom
sig/maxRequestBodySize
May 15, 2025
Merged

feat(node): Add maxIncomingRequestBodySize#16225
s1gr1d merged 4 commits into
developfrom
sig/maxRequestBodySize

Conversation

@s1gr1d

@s1gr1ds1gr1d commented May 7, 2025

Copy link
Copy Markdown
Member

Adds maxIncomingRequestBodySize to the Node httpIntegration.
The setting controls the maximum size of HTTP request bodies attached to events.

There is the option maxRequestBodySize (docs) in other SDKs, but to be more specific, this is named with incoming.

Available options:

  • 'none': No request bodies will be attached
  • 'small': Request bodies up to 1,000 bytes will be attached
  • 'medium': Request bodies up to 10,000 bytes will be attached (default)
  • 'always': Request bodies will always be attached (up to 1 MB)

closes#16179

@s1gr1d
s1gr1dforce-pushed the sig/maxRequestBodySize branch from 560976f to 7a21af7CompareMay 7, 2025 17:17
@s1gr1d
s1gr1d requested a review from mydeaMay 7, 2025 17:18
@github-actions

github-actionsBot commented May 7, 2025

Copy link
Copy Markdown
Contributor

size-limit report 📦

PathSize% ChangeChange
@sentry/browser23.96 kB--
@sentry/browser - with treeshaking flags23.62 kB--
@sentry/browser (incl. Tracing)38.21 kB--
@sentry/browser (incl. Tracing, Replay)76.32 kB--
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags69.35 kB--
@sentry/browser (incl. Tracing, Replay with Canvas)81.09 kB--
@sentry/browser (incl. Tracing, Replay, Feedback)93.18 kB--
@sentry/browser (incl. Feedback)40.76 kB--
@sentry/browser (incl. sendFeedback)28.7 kB--
@sentry/browser (incl. FeedbackAsync)33.58 kB--
@sentry/react25.77 kB--
@sentry/react (incl. Tracing)40.21 kB--
@sentry/vue28.34 kB--
@sentry/vue (incl. Tracing)40 kB--
@sentry/svelte23.99 kB--
CDN Bundle25.17 kB--
CDN Bundle (incl. Tracing)38.23 kB--
CDN Bundle (incl. Tracing, Replay)74.11 kB--
CDN Bundle (incl. Tracing, Replay, Feedback)79.54 kB--
CDN Bundle - uncompressed73.44 kB--
CDN Bundle (incl. Tracing) - uncompressed113.15 kB--
CDN Bundle (incl. Tracing, Replay) - uncompressed227.11 kB--
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed239.93 kB--
@sentry/nextjs (client)41.86 kB--
@sentry/sveltekit (client)38.68 kB--
@sentry/node158.08 kB+0.06%+83 B 🔺
@sentry/node - without tracing97.97 kB+0.09%+79 B 🔺
@sentry/aws-serverless123.33 kB+0.07%+83 B 🔺

View base workflow run

*
* @default 'medium'
*/
maxRequestBodySize?: 'none' | 'small' | 'medium' | 'always';

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should we rename this to maxIncomingRequestBodySize? It is not clear right now that this only applies to incoming requests, not outgoing ones 😅

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I got the name from the general Sentry docs: https://develop.sentry.dev/sdk/expected-features/#attaching-request-body-in-server-sdks

To be uniform with other SDKs, it would be beneficial to keep the name, but I agree that it would be clearer with incoming. At least, the information is available in the JSDoc 😅

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we don't need to have the same name, if we think something else is better :) maybe you could also check with other sdk folks, if this also applies to outgoing requests in other implementations or just to incoming?

function patchRequestToCaptureBody(
req: http.IncomingMessage,
isolationScope: Scope,
maxRequestBodySize: 'none' | 'small' | 'medium' | 'always',

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

l: We could actually type this to omit none as allowed value, and then avoid the further check in here, as we actually guard agains this already before calling this?

if (event === 'data') {
DEBUG_BUILD && logger.log(INSTRUMENTATION_NAME, 'Handling request.on("data")');
if (DEBUG_BUILD) {
logger.log(INSTRUMENTATION_NAME, 'Handling request.on("data")');

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

l: Let's combine these into a single log line, e.g. Handling request.on("data") with maximum request body size ...

@s1gr1ds1gr1d changed the title feat(node): Add maxRequestBodySizefeat(node): Add maxIncomingRequestBodySizeMay 13, 2025
@s1gr1d
s1gr1d requested a review from mydeaMay 13, 2025 14:57
*
* @default 'medium'
*/
maxRequestBodySize?: 'none' | 'small' | 'medium' | 'always';

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

m: Just to confirm - you're still going to change the name here?

@s1gr1ds1gr1dMay 14, 2025

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ah thanks - seems like my push of the commit where I changed the naming didn't get through 😄

await runner.completed();
});

test('does not capture any request bodies with "none" setting and "ignoreIncomingRequestBody"', async () => {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

does it make sense to combine these two? should we not combine the filter function with e.g. always setting? 🤔

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I added this test because I was actually running into an issue 😄
I had a logic problem in the if condition and it was sending the request body.

It's basically testing that the if condition is correct: https://github.com/getsentry/sentry-javascript/pull/16225/files#diff-964fee03880b5de6d711130f1ad4111d04e194bc066ea1725b4e6b7c1c722a42R266

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

then this is great :D

@s1gr1d
s1gr1d requested a review from mydeaMay 15, 2025 07:45
@s1gr1d
s1gr1d merged commit 12c90d1 into developMay 15, 2025
@s1gr1d
s1gr1d deleted the sig/maxRequestBodySize branch May 15, 2025 14:00
s1gr1d added a commit to getsentry/sentry-docs that referenced this pull request May 20, 2025
…mingRequestBody` (#13698)
## DESCRIBE YOUR PR
Documents `ignoreIncomingRequestBody `:
getsentry/sentry-javascript#15959
Documents `maxIncomingRequestBodySize`:
getsentry/sentry-javascript#16225
## IS YOUR CHANGE URGENT? Help us prioritize incoming PRs by letting us know when the change needs
to go live.
- [ ] Urgent deadline (GA date, etc.): <!-- ENTER DATE HERE -->
- [ ] Other deadline: <!-- ENTER DATE HERE -->
- [x] None: Not urgent, can wait up to 1 week+
## SLA
- Teamwork makes the dream work, so please add a reviewer to your PRs.
- Please give the docs team up to 1 week to review your PR unless you've
added an urgent due date to it.
Thanks in advance for your help!
## PRE-MERGE CHECKLIST
*Make sure you've checked the following before merging your changes:*
- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)
bitsandfoxes pushed a commit to getsentry/sentry-docs that referenced this pull request Jul 3, 2025
…mingRequestBody` (#13698)
## DESCRIBE YOUR PR
Documents `ignoreIncomingRequestBody `:
getsentry/sentry-javascript#15959
Documents `maxIncomingRequestBodySize`:
getsentry/sentry-javascript#16225
## IS YOUR CHANGE URGENT? Help us prioritize incoming PRs by letting us know when the change needs
to go live.
- [ ] Urgent deadline (GA date, etc.): <!-- ENTER DATE HERE -->
- [ ] Other deadline: <!-- ENTER DATE HERE -->
- [x] None: Not urgent, can wait up to 1 week+
## SLA
- Teamwork makes the dream work, so please add a reviewer to your PRs.
- Please give the docs team up to 1 week to review your PR unless you've
added an urgent due date to it.
Thanks in advance for your help!
## PRE-MERGE CHECKLIST
*Make sure you've checked the following before merging your changes:*
- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Node] Add maxRequestBodySize to SentryHttpIntegration

3 participants

@s1gr1d@mydea@Lms24
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix"); } } catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

feat(node): Add maxIncomingRequestBodySize - #16225

Merged
s1gr1d merged 4 commits into
developfrom
sig/maxRequestBodySize
May 15, 2025
Merged

feat(node): Add maxIncomingRequestBodySize#16225
s1gr1d merged 4 commits into
developfrom
sig/maxRequestBodySize

Conversation

@s1gr1d

@s1gr1ds1gr1d commented May 7, 2025

Copy link
Copy Markdown
Member

Adds maxIncomingRequestBodySize to the Node httpIntegration.
The setting controls the maximum size of HTTP request bodies attached to events.

There is the option maxRequestBodySize (docs) in other SDKs, but to be more specific, this is named with incoming.

Available options:

  • 'none': No request bodies will be attached
  • 'small': Request bodies up to 1,000 bytes will be attached
  • 'medium': Request bodies up to 10,000 bytes will be attached (default)
  • 'always': Request bodies will always be attached (up to 1 MB)

closes#16179

@s1gr1d
s1gr1dforce-pushed the sig/maxRequestBodySize branch from 560976f to 7a21af7CompareMay 7, 2025 17:17
@s1gr1d
s1gr1d requested a review from mydeaMay 7, 2025 17:18
@github-actions

github-actionsBot commented May 7, 2025

Copy link
Copy Markdown
Contributor

size-limit report 📦

PathSize% ChangeChange
@sentry/browser23.96 kB--
@sentry/browser - with treeshaking flags23.62 kB--
@sentry/browser (incl. Tracing)38.21 kB--
@sentry/browser (incl. Tracing, Replay)76.32 kB--
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags69.35 kB--
@sentry/browser (incl. Tracing, Replay with Canvas)81.09 kB--
@sentry/browser (incl. Tracing, Replay, Feedback)93.18 kB--
@sentry/browser (incl. Feedback)40.76 kB--
@sentry/browser (incl. sendFeedback)28.7 kB--
@sentry/browser (incl. FeedbackAsync)33.58 kB--
@sentry/react25.77 kB--
@sentry/react (incl. Tracing)40.21 kB--
@sentry/vue28.34 kB--
@sentry/vue (incl. Tracing)40 kB--
@sentry/svelte23.99 kB--
CDN Bundle25.17 kB--
CDN Bundle (incl. Tracing)38.23 kB--
CDN Bundle (incl. Tracing, Replay)74.11 kB--
CDN Bundle (incl. Tracing, Replay, Feedback)79.54 kB--
CDN Bundle - uncompressed73.44 kB--
CDN Bundle (incl. Tracing) - uncompressed113.15 kB--
CDN Bundle (incl. Tracing, Replay) - uncompressed227.11 kB--
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed239.93 kB--
@sentry/nextjs (client)41.86 kB--
@sentry/sveltekit (client)38.68 kB--
@sentry/node158.08 kB+0.06%+83 B 🔺
@sentry/node - without tracing97.97 kB+0.09%+79 B 🔺
@sentry/aws-serverless123.33 kB+0.07%+83 B 🔺

View base workflow run

*
* @default 'medium'
*/
maxRequestBodySize?: 'none' | 'small' | 'medium' | 'always';

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should we rename this to maxIncomingRequestBodySize? It is not clear right now that this only applies to incoming requests, not outgoing ones 😅

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I got the name from the general Sentry docs: https://develop.sentry.dev/sdk/expected-features/#attaching-request-body-in-server-sdks

To be uniform with other SDKs, it would be beneficial to keep the name, but I agree that it would be clearer with incoming. At least, the information is available in the JSDoc 😅

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we don't need to have the same name, if we think something else is better :) maybe you could also check with other sdk folks, if this also applies to outgoing requests in other implementations or just to incoming?

function patchRequestToCaptureBody(
req: http.IncomingMessage,
isolationScope: Scope,
maxRequestBodySize: 'none' | 'small' | 'medium' | 'always',

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

l: We could actually type this to omit none as allowed value, and then avoid the further check in here, as we actually guard agains this already before calling this?

if (event === 'data') {
DEBUG_BUILD && logger.log(INSTRUMENTATION_NAME, 'Handling request.on("data")');
if (DEBUG_BUILD) {
logger.log(INSTRUMENTATION_NAME, 'Handling request.on("data")');

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

l: Let's combine these into a single log line, e.g. Handling request.on("data") with maximum request body size ...

@s1gr1ds1gr1d changed the title feat(node): Add maxRequestBodySizefeat(node): Add maxIncomingRequestBodySizeMay 13, 2025
@s1gr1d
s1gr1d requested a review from mydeaMay 13, 2025 14:57
*
* @default 'medium'
*/
maxRequestBodySize?: 'none' | 'small' | 'medium' | 'always';

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

m: Just to confirm - you're still going to change the name here?

@s1gr1ds1gr1dMay 14, 2025

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ah thanks - seems like my push of the commit where I changed the naming didn't get through 😄

await runner.completed();
});

test('does not capture any request bodies with "none" setting and "ignoreIncomingRequestBody"', async () => {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

does it make sense to combine these two? should we not combine the filter function with e.g. always setting? 🤔

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I added this test because I was actually running into an issue 😄
I had a logic problem in the if condition and it was sending the request body.

It's basically testing that the if condition is correct: https://github.com/getsentry/sentry-javascript/pull/16225/files#diff-964fee03880b5de6d711130f1ad4111d04e194bc066ea1725b4e6b7c1c722a42R266

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

then this is great :D

@s1gr1d
s1gr1d requested a review from mydeaMay 15, 2025 07:45
@s1gr1d
s1gr1d merged commit 12c90d1 into developMay 15, 2025
@s1gr1d
s1gr1d deleted the sig/maxRequestBodySize branch May 15, 2025 14:00
s1gr1d added a commit to getsentry/sentry-docs that referenced this pull request May 20, 2025
…mingRequestBody` (#13698)
## DESCRIBE YOUR PR
Documents `ignoreIncomingRequestBody `:
getsentry/sentry-javascript#15959
Documents `maxIncomingRequestBodySize`:
getsentry/sentry-javascript#16225
## IS YOUR CHANGE URGENT? Help us prioritize incoming PRs by letting us know when the change needs
to go live.
- [ ] Urgent deadline (GA date, etc.): <!-- ENTER DATE HERE -->
- [ ] Other deadline: <!-- ENTER DATE HERE -->
- [x] None: Not urgent, can wait up to 1 week+
## SLA
- Teamwork makes the dream work, so please add a reviewer to your PRs.
- Please give the docs team up to 1 week to review your PR unless you've
added an urgent due date to it.
Thanks in advance for your help!
## PRE-MERGE CHECKLIST
*Make sure you've checked the following before merging your changes:*
- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)
bitsandfoxes pushed a commit to getsentry/sentry-docs that referenced this pull request Jul 3, 2025
…mingRequestBody` (#13698)
## DESCRIBE YOUR PR
Documents `ignoreIncomingRequestBody `:
getsentry/sentry-javascript#15959
Documents `maxIncomingRequestBodySize`:
getsentry/sentry-javascript#16225
## IS YOUR CHANGE URGENT? Help us prioritize incoming PRs by letting us know when the change needs
to go live.
- [ ] Urgent deadline (GA date, etc.): <!-- ENTER DATE HERE -->
- [ ] Other deadline: <!-- ENTER DATE HERE -->
- [x] None: Not urgent, can wait up to 1 week+
## SLA
- Teamwork makes the dream work, so please add a reviewer to your PRs.
- Please give the docs team up to 1 week to review your PR unless you've
added an urgent due date to it.
Thanks in advance for your help!
## PRE-MERGE CHECKLIST
*Make sure you've checked the following before merging your changes:*
- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Node] Add maxRequestBodySize to SentryHttpIntegration

3 participants

@s1gr1d@mydea@Lms24
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms"); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

feat(node): Add maxIncomingRequestBodySize - #16225

Merged
s1gr1d merged 4 commits into
developfrom
sig/maxRequestBodySize
May 15, 2025
Merged

feat(node): Add maxIncomingRequestBodySize#16225
s1gr1d merged 4 commits into
developfrom
sig/maxRequestBodySize

Conversation

@s1gr1d

@s1gr1ds1gr1d commented May 7, 2025

Copy link
Copy Markdown
Member

Adds maxIncomingRequestBodySize to the Node httpIntegration.
The setting controls the maximum size of HTTP request bodies attached to events.

There is the option maxRequestBodySize (docs) in other SDKs, but to be more specific, this is named with incoming.

Available options:

  • 'none': No request bodies will be attached
  • 'small': Request bodies up to 1,000 bytes will be attached
  • 'medium': Request bodies up to 10,000 bytes will be attached (default)
  • 'always': Request bodies will always be attached (up to 1 MB)

closes#16179

@s1gr1d
s1gr1dforce-pushed the sig/maxRequestBodySize branch from 560976f to 7a21af7CompareMay 7, 2025 17:17
@s1gr1d
s1gr1d requested a review from mydeaMay 7, 2025 17:18
@github-actions

github-actionsBot commented May 7, 2025

Copy link
Copy Markdown
Contributor

size-limit report 📦

PathSize% ChangeChange
@sentry/browser23.96 kB--
@sentry/browser - with treeshaking flags23.62 kB--
@sentry/browser (incl. Tracing)38.21 kB--
@sentry/browser (incl. Tracing, Replay)76.32 kB--
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags69.35 kB--
@sentry/browser (incl. Tracing, Replay with Canvas)81.09 kB--
@sentry/browser (incl. Tracing, Replay, Feedback)93.18 kB--
@sentry/browser (incl. Feedback)40.76 kB--
@sentry/browser (incl. sendFeedback)28.7 kB--
@sentry/browser (incl. FeedbackAsync)33.58 kB--
@sentry/react25.77 kB--
@sentry/react (incl. Tracing)40.21 kB--
@sentry/vue28.34 kB--
@sentry/vue (incl. Tracing)40 kB--
@sentry/svelte23.99 kB--
CDN Bundle25.17 kB--
CDN Bundle (incl. Tracing)38.23 kB--
CDN Bundle (incl. Tracing, Replay)74.11 kB--
CDN Bundle (incl. Tracing, Replay, Feedback)79.54 kB--
CDN Bundle - uncompressed73.44 kB--
CDN Bundle (incl. Tracing) - uncompressed113.15 kB--
CDN Bundle (incl. Tracing, Replay) - uncompressed227.11 kB--
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed239.93 kB--
@sentry/nextjs (client)41.86 kB--
@sentry/sveltekit (client)38.68 kB--
@sentry/node158.08 kB+0.06%+83 B 🔺
@sentry/node - without tracing97.97 kB+0.09%+79 B 🔺
@sentry/aws-serverless123.33 kB+0.07%+83 B 🔺

View base workflow run

*
* @default 'medium'
*/
maxRequestBodySize?: 'none' | 'small' | 'medium' | 'always';

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should we rename this to maxIncomingRequestBodySize? It is not clear right now that this only applies to incoming requests, not outgoing ones 😅

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I got the name from the general Sentry docs: https://develop.sentry.dev/sdk/expected-features/#attaching-request-body-in-server-sdks

To be uniform with other SDKs, it would be beneficial to keep the name, but I agree that it would be clearer with incoming. At least, the information is available in the JSDoc 😅

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we don't need to have the same name, if we think something else is better :) maybe you could also check with other sdk folks, if this also applies to outgoing requests in other implementations or just to incoming?

function patchRequestToCaptureBody(
req: http.IncomingMessage,
isolationScope: Scope,
maxRequestBodySize: 'none' | 'small' | 'medium' | 'always',

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

l: We could actually type this to omit none as allowed value, and then avoid the further check in here, as we actually guard agains this already before calling this?

if (event === 'data') {
DEBUG_BUILD && logger.log(INSTRUMENTATION_NAME, 'Handling request.on("data")');
if (DEBUG_BUILD) {
logger.log(INSTRUMENTATION_NAME, 'Handling request.on("data")');

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

l: Let's combine these into a single log line, e.g. Handling request.on("data") with maximum request body size ...

@s1gr1ds1gr1d changed the title feat(node): Add maxRequestBodySizefeat(node): Add maxIncomingRequestBodySizeMay 13, 2025
@s1gr1d
s1gr1d requested a review from mydeaMay 13, 2025 14:57
*
* @default 'medium'
*/
maxRequestBodySize?: 'none' | 'small' | 'medium' | 'always';

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

m: Just to confirm - you're still going to change the name here?

@s1gr1ds1gr1dMay 14, 2025

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ah thanks - seems like my push of the commit where I changed the naming didn't get through 😄

await runner.completed();
});

test('does not capture any request bodies with "none" setting and "ignoreIncomingRequestBody"', async () => {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

does it make sense to combine these two? should we not combine the filter function with e.g. always setting? 🤔

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I added this test because I was actually running into an issue 😄
I had a logic problem in the if condition and it was sending the request body.

It's basically testing that the if condition is correct: https://github.com/getsentry/sentry-javascript/pull/16225/files#diff-964fee03880b5de6d711130f1ad4111d04e194bc066ea1725b4e6b7c1c722a42R266

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

then this is great :D

@s1gr1d
s1gr1d requested a review from mydeaMay 15, 2025 07:45
@s1gr1d
s1gr1d merged commit 12c90d1 into developMay 15, 2025
@s1gr1d
s1gr1d deleted the sig/maxRequestBodySize branch May 15, 2025 14:00
s1gr1d added a commit to getsentry/sentry-docs that referenced this pull request May 20, 2025
…mingRequestBody` (#13698)
## DESCRIBE YOUR PR
Documents `ignoreIncomingRequestBody `:
getsentry/sentry-javascript#15959
Documents `maxIncomingRequestBodySize`:
getsentry/sentry-javascript#16225
## IS YOUR CHANGE URGENT? Help us prioritize incoming PRs by letting us know when the change needs
to go live.
- [ ] Urgent deadline (GA date, etc.): <!-- ENTER DATE HERE -->
- [ ] Other deadline: <!-- ENTER DATE HERE -->
- [x] None: Not urgent, can wait up to 1 week+
## SLA
- Teamwork makes the dream work, so please add a reviewer to your PRs.
- Please give the docs team up to 1 week to review your PR unless you've
added an urgent due date to it.
Thanks in advance for your help!
## PRE-MERGE CHECKLIST
*Make sure you've checked the following before merging your changes:*
- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)
bitsandfoxes pushed a commit to getsentry/sentry-docs that referenced this pull request Jul 3, 2025
…mingRequestBody` (#13698)
## DESCRIBE YOUR PR
Documents `ignoreIncomingRequestBody `:
getsentry/sentry-javascript#15959
Documents `maxIncomingRequestBodySize`:
getsentry/sentry-javascript#16225
## IS YOUR CHANGE URGENT? Help us prioritize incoming PRs by letting us know when the change needs
to go live.
- [ ] Urgent deadline (GA date, etc.): <!-- ENTER DATE HERE -->
- [ ] Other deadline: <!-- ENTER DATE HERE -->
- [x] None: Not urgent, can wait up to 1 week+
## SLA
- Teamwork makes the dream work, so please add a reviewer to your PRs.
- Please give the docs team up to 1 week to review your PR unless you've
added an urgent due date to it.
Thanks in advance for your help!
## PRE-MERGE CHECKLIST
*Make sure you've checked the following before merging your changes:*
- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Node] Add maxRequestBodySize to SentryHttpIntegration

3 participants

@s1gr1d@mydea@Lms24
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links"); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + '
Skip to content

feat(node): Add maxIncomingRequestBodySize - #16225

Merged
s1gr1d merged 4 commits into
developfrom
sig/maxRequestBodySize
May 15, 2025
Merged

feat(node): Add maxIncomingRequestBodySize#16225
s1gr1d merged 4 commits into
developfrom
sig/maxRequestBodySize

Conversation

@s1gr1d

@s1gr1ds1gr1d commented May 7, 2025

Copy link
Copy Markdown
Member

Adds maxIncomingRequestBodySize to the Node httpIntegration.
The setting controls the maximum size of HTTP request bodies attached to events.

There is the option maxRequestBodySize (docs) in other SDKs, but to be more specific, this is named with incoming.

Available options:

  • 'none': No request bodies will be attached
  • 'small': Request bodies up to 1,000 bytes will be attached
  • 'medium': Request bodies up to 10,000 bytes will be attached (default)
  • 'always': Request bodies will always be attached (up to 1 MB)

closes#16179

@s1gr1d
s1gr1dforce-pushed the sig/maxRequestBodySize branch from 560976f to 7a21af7CompareMay 7, 2025 17:17
@s1gr1d
s1gr1d requested a review from mydeaMay 7, 2025 17:18
@github-actions

github-actionsBot commented May 7, 2025

Copy link
Copy Markdown
Contributor

size-limit report 📦

PathSize% ChangeChange
@sentry/browser23.96 kB--
@sentry/browser - with treeshaking flags23.62 kB--
@sentry/browser (incl. Tracing)38.21 kB--
@sentry/browser (incl. Tracing, Replay)76.32 kB--
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags69.35 kB--
@sentry/browser (incl. Tracing, Replay with Canvas)81.09 kB--
@sentry/browser (incl. Tracing, Replay, Feedback)93.18 kB--
@sentry/browser (incl. Feedback)40.76 kB--
@sentry/browser (incl. sendFeedback)28.7 kB--
@sentry/browser (incl. FeedbackAsync)33.58 kB--
@sentry/react25.77 kB--
@sentry/react (incl. Tracing)40.21 kB--
@sentry/vue28.34 kB--
@sentry/vue (incl. Tracing)40 kB--
@sentry/svelte23.99 kB--
CDN Bundle25.17 kB--
CDN Bundle (incl. Tracing)38.23 kB--
CDN Bundle (incl. Tracing, Replay)74.11 kB--
CDN Bundle (incl. Tracing, Replay, Feedback)79.54 kB--
CDN Bundle - uncompressed73.44 kB--
CDN Bundle (incl. Tracing) - uncompressed113.15 kB--
CDN Bundle (incl. Tracing, Replay) - uncompressed227.11 kB--
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed239.93 kB--
@sentry/nextjs (client)41.86 kB--
@sentry/sveltekit (client)38.68 kB--
@sentry/node158.08 kB+0.06%+83 B 🔺
@sentry/node - without tracing97.97 kB+0.09%+79 B 🔺
@sentry/aws-serverless123.33 kB+0.07%+83 B 🔺

View base workflow run

*
* @default 'medium'
*/
maxRequestBodySize?: 'none' | 'small' | 'medium' | 'always';

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should we rename this to maxIncomingRequestBodySize? It is not clear right now that this only applies to incoming requests, not outgoing ones 😅

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I got the name from the general Sentry docs: https://develop.sentry.dev/sdk/expected-features/#attaching-request-body-in-server-sdks

To be uniform with other SDKs, it would be beneficial to keep the name, but I agree that it would be clearer with incoming. At least, the information is available in the JSDoc 😅

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we don't need to have the same name, if we think something else is better :) maybe you could also check with other sdk folks, if this also applies to outgoing requests in other implementations or just to incoming?

function patchRequestToCaptureBody(
req: http.IncomingMessage,
isolationScope: Scope,
maxRequestBodySize: 'none' | 'small' | 'medium' | 'always',

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

l: We could actually type this to omit none as allowed value, and then avoid the further check in here, as we actually guard agains this already before calling this?

if (event === 'data') {
DEBUG_BUILD && logger.log(INSTRUMENTATION_NAME, 'Handling request.on("data")');
if (DEBUG_BUILD) {
logger.log(INSTRUMENTATION_NAME, 'Handling request.on("data")');

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

l: Let's combine these into a single log line, e.g. Handling request.on("data") with maximum request body size ...

@s1gr1ds1gr1d changed the title feat(node): Add maxRequestBodySizefeat(node): Add maxIncomingRequestBodySizeMay 13, 2025
@s1gr1d
s1gr1d requested a review from mydeaMay 13, 2025 14:57
*
* @default 'medium'
*/
maxRequestBodySize?: 'none' | 'small' | 'medium' | 'always';

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

m: Just to confirm - you're still going to change the name here?

@s1gr1ds1gr1dMay 14, 2025

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ah thanks - seems like my push of the commit where I changed the naming didn't get through 😄

await runner.completed();
});

test('does not capture any request bodies with "none" setting and "ignoreIncomingRequestBody"', async () => {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

does it make sense to combine these two? should we not combine the filter function with e.g. always setting? 🤔

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I added this test because I was actually running into an issue 😄
I had a logic problem in the if condition and it was sending the request body.

It's basically testing that the if condition is correct: https://github.com/getsentry/sentry-javascript/pull/16225/files#diff-964fee03880b5de6d711130f1ad4111d04e194bc066ea1725b4e6b7c1c722a42R266

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

then this is great :D

@s1gr1d
s1gr1d requested a review from mydeaMay 15, 2025 07:45
@s1gr1d
s1gr1d merged commit 12c90d1 into developMay 15, 2025
@s1gr1d
s1gr1d deleted the sig/maxRequestBodySize branch May 15, 2025 14:00
s1gr1d added a commit to getsentry/sentry-docs that referenced this pull request May 20, 2025
…mingRequestBody` (#13698)
## DESCRIBE YOUR PR
Documents `ignoreIncomingRequestBody `:
getsentry/sentry-javascript#15959
Documents `maxIncomingRequestBodySize`:
getsentry/sentry-javascript#16225
## IS YOUR CHANGE URGENT? Help us prioritize incoming PRs by letting us know when the change needs
to go live.
- [ ] Urgent deadline (GA date, etc.): <!-- ENTER DATE HERE -->
- [ ] Other deadline: <!-- ENTER DATE HERE -->
- [x] None: Not urgent, can wait up to 1 week+
## SLA
- Teamwork makes the dream work, so please add a reviewer to your PRs.
- Please give the docs team up to 1 week to review your PR unless you've
added an urgent due date to it.
Thanks in advance for your help!
## PRE-MERGE CHECKLIST
*Make sure you've checked the following before merging your changes:*
- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)
bitsandfoxes pushed a commit to getsentry/sentry-docs that referenced this pull request Jul 3, 2025
…mingRequestBody` (#13698)
## DESCRIBE YOUR PR
Documents `ignoreIncomingRequestBody `:
getsentry/sentry-javascript#15959
Documents `maxIncomingRequestBodySize`:
getsentry/sentry-javascript#16225
## IS YOUR CHANGE URGENT? Help us prioritize incoming PRs by letting us know when the change needs
to go live.
- [ ] Urgent deadline (GA date, etc.): <!-- ENTER DATE HERE -->
- [ ] Other deadline: <!-- ENTER DATE HERE -->
- [x] None: Not urgent, can wait up to 1 week+
## SLA
- Teamwork makes the dream work, so please add a reviewer to your PRs.
- Please give the docs team up to 1 week to review your PR unless you've
added an urgent due date to it.
Thanks in advance for your help!
## PRE-MERGE CHECKLIST
*Make sure you've checked the following before merging your changes:*
- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Node] Add maxRequestBodySize to SentryHttpIntegration

3 participants

@s1gr1d@mydea@Lms24
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default"); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

feat(node): Add maxIncomingRequestBodySize - #16225

Merged
s1gr1d merged 4 commits into
developfrom
sig/maxRequestBodySize
May 15, 2025
Merged

feat(node): Add maxIncomingRequestBodySize#16225
s1gr1d merged 4 commits into
developfrom
sig/maxRequestBodySize

Conversation

@s1gr1d

@s1gr1ds1gr1d commented May 7, 2025

Copy link
Copy Markdown
Member

Adds maxIncomingRequestBodySize to the Node httpIntegration.
The setting controls the maximum size of HTTP request bodies attached to events.

There is the option maxRequestBodySize (docs) in other SDKs, but to be more specific, this is named with incoming.

Available options:

  • 'none': No request bodies will be attached
  • 'small': Request bodies up to 1,000 bytes will be attached
  • 'medium': Request bodies up to 10,000 bytes will be attached (default)
  • 'always': Request bodies will always be attached (up to 1 MB)

closes#16179

@s1gr1d
s1gr1dforce-pushed the sig/maxRequestBodySize branch from 560976f to 7a21af7CompareMay 7, 2025 17:17
@s1gr1d
s1gr1d requested a review from mydeaMay 7, 2025 17:18
@github-actions

github-actionsBot commented May 7, 2025

Copy link
Copy Markdown
Contributor

size-limit report 📦

PathSize% ChangeChange
@sentry/browser23.96 kB--
@sentry/browser - with treeshaking flags23.62 kB--
@sentry/browser (incl. Tracing)38.21 kB--
@sentry/browser (incl. Tracing, Replay)76.32 kB--
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags69.35 kB--
@sentry/browser (incl. Tracing, Replay with Canvas)81.09 kB--
@sentry/browser (incl. Tracing, Replay, Feedback)93.18 kB--
@sentry/browser (incl. Feedback)40.76 kB--
@sentry/browser (incl. sendFeedback)28.7 kB--
@sentry/browser (incl. FeedbackAsync)33.58 kB--
@sentry/react25.77 kB--
@sentry/react (incl. Tracing)40.21 kB--
@sentry/vue28.34 kB--
@sentry/vue (incl. Tracing)40 kB--
@sentry/svelte23.99 kB--
CDN Bundle25.17 kB--
CDN Bundle (incl. Tracing)38.23 kB--
CDN Bundle (incl. Tracing, Replay)74.11 kB--
CDN Bundle (incl. Tracing, Replay, Feedback)79.54 kB--
CDN Bundle - uncompressed73.44 kB--
CDN Bundle (incl. Tracing) - uncompressed113.15 kB--
CDN Bundle (incl. Tracing, Replay) - uncompressed227.11 kB--
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed239.93 kB--
@sentry/nextjs (client)41.86 kB--
@sentry/sveltekit (client)38.68 kB--
@sentry/node158.08 kB+0.06%+83 B 🔺
@sentry/node - without tracing97.97 kB+0.09%+79 B 🔺
@sentry/aws-serverless123.33 kB+0.07%+83 B 🔺

View base workflow run

*
* @default 'medium'
*/
maxRequestBodySize?: 'none' | 'small' | 'medium' | 'always';

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should we rename this to maxIncomingRequestBodySize? It is not clear right now that this only applies to incoming requests, not outgoing ones 😅

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I got the name from the general Sentry docs: https://develop.sentry.dev/sdk/expected-features/#attaching-request-body-in-server-sdks

To be uniform with other SDKs, it would be beneficial to keep the name, but I agree that it would be clearer with incoming. At least, the information is available in the JSDoc 😅

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we don't need to have the same name, if we think something else is better :) maybe you could also check with other sdk folks, if this also applies to outgoing requests in other implementations or just to incoming?

function patchRequestToCaptureBody(
req: http.IncomingMessage,
isolationScope: Scope,
maxRequestBodySize: 'none' | 'small' | 'medium' | 'always',

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

l: We could actually type this to omit none as allowed value, and then avoid the further check in here, as we actually guard agains this already before calling this?

if (event === 'data') {
DEBUG_BUILD && logger.log(INSTRUMENTATION_NAME, 'Handling request.on("data")');
if (DEBUG_BUILD) {
logger.log(INSTRUMENTATION_NAME, 'Handling request.on("data")');

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

l: Let's combine these into a single log line, e.g. Handling request.on("data") with maximum request body size ...

@s1gr1ds1gr1d changed the title feat(node): Add maxRequestBodySizefeat(node): Add maxIncomingRequestBodySizeMay 13, 2025
@s1gr1d
s1gr1d requested a review from mydeaMay 13, 2025 14:57
*
* @default 'medium'
*/
maxRequestBodySize?: 'none' | 'small' | 'medium' | 'always';

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

m: Just to confirm - you're still going to change the name here?

@s1gr1ds1gr1dMay 14, 2025

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ah thanks - seems like my push of the commit where I changed the naming didn't get through 😄

await runner.completed();
});

test('does not capture any request bodies with "none" setting and "ignoreIncomingRequestBody"', async () => {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

does it make sense to combine these two? should we not combine the filter function with e.g. always setting? 🤔

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I added this test because I was actually running into an issue 😄
I had a logic problem in the if condition and it was sending the request body.

It's basically testing that the if condition is correct: https://github.com/getsentry/sentry-javascript/pull/16225/files#diff-964fee03880b5de6d711130f1ad4111d04e194bc066ea1725b4e6b7c1c722a42R266

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

then this is great :D

@s1gr1d
s1gr1d requested a review from mydeaMay 15, 2025 07:45
@s1gr1d
s1gr1d merged commit 12c90d1 into developMay 15, 2025
@s1gr1d
s1gr1d deleted the sig/maxRequestBodySize branch May 15, 2025 14:00
s1gr1d added a commit to getsentry/sentry-docs that referenced this pull request May 20, 2025
…mingRequestBody` (#13698)
## DESCRIBE YOUR PR
Documents `ignoreIncomingRequestBody `:
getsentry/sentry-javascript#15959
Documents `maxIncomingRequestBodySize`:
getsentry/sentry-javascript#16225
## IS YOUR CHANGE URGENT? Help us prioritize incoming PRs by letting us know when the change needs
to go live.
- [ ] Urgent deadline (GA date, etc.): <!-- ENTER DATE HERE -->
- [ ] Other deadline: <!-- ENTER DATE HERE -->
- [x] None: Not urgent, can wait up to 1 week+
## SLA
- Teamwork makes the dream work, so please add a reviewer to your PRs.
- Please give the docs team up to 1 week to review your PR unless you've
added an urgent due date to it.
Thanks in advance for your help!
## PRE-MERGE CHECKLIST
*Make sure you've checked the following before merging your changes:*
- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)
bitsandfoxes pushed a commit to getsentry/sentry-docs that referenced this pull request Jul 3, 2025
…mingRequestBody` (#13698)
## DESCRIBE YOUR PR
Documents `ignoreIncomingRequestBody `:
getsentry/sentry-javascript#15959
Documents `maxIncomingRequestBodySize`:
getsentry/sentry-javascript#16225
## IS YOUR CHANGE URGENT? Help us prioritize incoming PRs by letting us know when the change needs
to go live.
- [ ] Urgent deadline (GA date, etc.): <!-- ENTER DATE HERE -->
- [ ] Other deadline: <!-- ENTER DATE HERE -->
- [x] None: Not urgent, can wait up to 1 week+
## SLA
- Teamwork makes the dream work, so please add a reviewer to your PRs.
- Please give the docs team up to 1 week to review your PR unless you've
added an urgent due date to it.
Thanks in advance for your help!
## PRE-MERGE CHECKLIST
*Make sure you've checked the following before merging your changes:*
- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Node] Add maxRequestBodySize to SentryHttpIntegration

3 participants

@s1gr1d@mydea@Lms24
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers"); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

feat(node): Add maxIncomingRequestBodySize - #16225

Merged
s1gr1d merged 4 commits into
developfrom
sig/maxRequestBodySize
May 15, 2025
Merged

feat(node): Add maxIncomingRequestBodySize#16225
s1gr1d merged 4 commits into
developfrom
sig/maxRequestBodySize

Conversation

@s1gr1d

@s1gr1ds1gr1d commented May 7, 2025

Copy link
Copy Markdown
Member

Adds maxIncomingRequestBodySize to the Node httpIntegration.
The setting controls the maximum size of HTTP request bodies attached to events.

There is the option maxRequestBodySize (docs) in other SDKs, but to be more specific, this is named with incoming.

Available options:

  • 'none': No request bodies will be attached
  • 'small': Request bodies up to 1,000 bytes will be attached
  • 'medium': Request bodies up to 10,000 bytes will be attached (default)
  • 'always': Request bodies will always be attached (up to 1 MB)

closes#16179

@s1gr1d
s1gr1dforce-pushed the sig/maxRequestBodySize branch from 560976f to 7a21af7CompareMay 7, 2025 17:17
@s1gr1d
s1gr1d requested a review from mydeaMay 7, 2025 17:18
@github-actions

github-actionsBot commented May 7, 2025

Copy link
Copy Markdown
Contributor

size-limit report 📦

PathSize% ChangeChange
@sentry/browser23.96 kB--
@sentry/browser - with treeshaking flags23.62 kB--
@sentry/browser (incl. Tracing)38.21 kB--
@sentry/browser (incl. Tracing, Replay)76.32 kB--
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags69.35 kB--
@sentry/browser (incl. Tracing, Replay with Canvas)81.09 kB--
@sentry/browser (incl. Tracing, Replay, Feedback)93.18 kB--
@sentry/browser (incl. Feedback)40.76 kB--
@sentry/browser (incl. sendFeedback)28.7 kB--
@sentry/browser (incl. FeedbackAsync)33.58 kB--
@sentry/react25.77 kB--
@sentry/react (incl. Tracing)40.21 kB--
@sentry/vue28.34 kB--
@sentry/vue (incl. Tracing)40 kB--
@sentry/svelte23.99 kB--
CDN Bundle25.17 kB--
CDN Bundle (incl. Tracing)38.23 kB--
CDN Bundle (incl. Tracing, Replay)74.11 kB--
CDN Bundle (incl. Tracing, Replay, Feedback)79.54 kB--
CDN Bundle - uncompressed73.44 kB--
CDN Bundle (incl. Tracing) - uncompressed113.15 kB--
CDN Bundle (incl. Tracing, Replay) - uncompressed227.11 kB--
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed239.93 kB--
@sentry/nextjs (client)41.86 kB--
@sentry/sveltekit (client)38.68 kB--
@sentry/node158.08 kB+0.06%+83 B 🔺
@sentry/node - without tracing97.97 kB+0.09%+79 B 🔺
@sentry/aws-serverless123.33 kB+0.07%+83 B 🔺

View base workflow run

*
* @default 'medium'
*/
maxRequestBodySize?: 'none' | 'small' | 'medium' | 'always';

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should we rename this to maxIncomingRequestBodySize? It is not clear right now that this only applies to incoming requests, not outgoing ones 😅

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I got the name from the general Sentry docs: https://develop.sentry.dev/sdk/expected-features/#attaching-request-body-in-server-sdks

To be uniform with other SDKs, it would be beneficial to keep the name, but I agree that it would be clearer with incoming. At least, the information is available in the JSDoc 😅

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we don't need to have the same name, if we think something else is better :) maybe you could also check with other sdk folks, if this also applies to outgoing requests in other implementations or just to incoming?

function patchRequestToCaptureBody(
req: http.IncomingMessage,
isolationScope: Scope,
maxRequestBodySize: 'none' | 'small' | 'medium' | 'always',

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

l: We could actually type this to omit none as allowed value, and then avoid the further check in here, as we actually guard agains this already before calling this?

if (event === 'data') {
DEBUG_BUILD && logger.log(INSTRUMENTATION_NAME, 'Handling request.on("data")');
if (DEBUG_BUILD) {
logger.log(INSTRUMENTATION_NAME, 'Handling request.on("data")');

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

l: Let's combine these into a single log line, e.g. Handling request.on("data") with maximum request body size ...

@s1gr1ds1gr1d changed the title feat(node): Add maxRequestBodySizefeat(node): Add maxIncomingRequestBodySizeMay 13, 2025
@s1gr1d
s1gr1d requested a review from mydeaMay 13, 2025 14:57
*
* @default 'medium'
*/
maxRequestBodySize?: 'none' | 'small' | 'medium' | 'always';

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

m: Just to confirm - you're still going to change the name here?

@s1gr1ds1gr1dMay 14, 2025

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ah thanks - seems like my push of the commit where I changed the naming didn't get through 😄

await runner.completed();
});

test('does not capture any request bodies with "none" setting and "ignoreIncomingRequestBody"', async () => {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

does it make sense to combine these two? should we not combine the filter function with e.g. always setting? 🤔

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I added this test because I was actually running into an issue 😄
I had a logic problem in the if condition and it was sending the request body.

It's basically testing that the if condition is correct: https://github.com/getsentry/sentry-javascript/pull/16225/files#diff-964fee03880b5de6d711130f1ad4111d04e194bc066ea1725b4e6b7c1c722a42R266

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

then this is great :D

@s1gr1d
s1gr1d requested a review from mydeaMay 15, 2025 07:45
@s1gr1d
s1gr1d merged commit 12c90d1 into developMay 15, 2025
@s1gr1d
s1gr1d deleted the sig/maxRequestBodySize branch May 15, 2025 14:00
s1gr1d added a commit to getsentry/sentry-docs that referenced this pull request May 20, 2025
…mingRequestBody` (#13698)
## DESCRIBE YOUR PR
Documents `ignoreIncomingRequestBody `:
getsentry/sentry-javascript#15959
Documents `maxIncomingRequestBodySize`:
getsentry/sentry-javascript#16225
## IS YOUR CHANGE URGENT? Help us prioritize incoming PRs by letting us know when the change needs
to go live.
- [ ] Urgent deadline (GA date, etc.): <!-- ENTER DATE HERE -->
- [ ] Other deadline: <!-- ENTER DATE HERE -->
- [x] None: Not urgent, can wait up to 1 week+
## SLA
- Teamwork makes the dream work, so please add a reviewer to your PRs.
- Please give the docs team up to 1 week to review your PR unless you've
added an urgent due date to it.
Thanks in advance for your help!
## PRE-MERGE CHECKLIST
*Make sure you've checked the following before merging your changes:*
- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)
bitsandfoxes pushed a commit to getsentry/sentry-docs that referenced this pull request Jul 3, 2025
…mingRequestBody` (#13698)
## DESCRIBE YOUR PR
Documents `ignoreIncomingRequestBody `:
getsentry/sentry-javascript#15959
Documents `maxIncomingRequestBodySize`:
getsentry/sentry-javascript#16225
## IS YOUR CHANGE URGENT? Help us prioritize incoming PRs by letting us know when the change needs
to go live.
- [ ] Urgent deadline (GA date, etc.): <!-- ENTER DATE HERE -->
- [ ] Other deadline: <!-- ENTER DATE HERE -->
- [x] None: Not urgent, can wait up to 1 week+
## SLA
- Teamwork makes the dream work, so please add a reviewer to your PRs.
- Please give the docs team up to 1 week to review your PR unless you've
added an urgent due date to it.
Thanks in advance for your help!
## PRE-MERGE CHECKLIST
*Make sure you've checked the following before merging your changes:*
- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Node] Add maxRequestBodySize to SentryHttpIntegration

3 participants

@s1gr1d@mydea@Lms24
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode"); } } catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); } })(); })();
Skip to content

feat(node): Add maxIncomingRequestBodySize - #16225

Merged
s1gr1d merged 4 commits into
developfrom
sig/maxRequestBodySize
May 15, 2025
Merged

feat(node): Add maxIncomingRequestBodySize#16225
s1gr1d merged 4 commits into
developfrom
sig/maxRequestBodySize

Conversation

@s1gr1d

@s1gr1ds1gr1d commented May 7, 2025

Copy link
Copy Markdown
Member

Adds maxIncomingRequestBodySize to the Node httpIntegration.
The setting controls the maximum size of HTTP request bodies attached to events.

There is the option maxRequestBodySize (docs) in other SDKs, but to be more specific, this is named with incoming.

Available options:

  • 'none': No request bodies will be attached
  • 'small': Request bodies up to 1,000 bytes will be attached
  • 'medium': Request bodies up to 10,000 bytes will be attached (default)
  • 'always': Request bodies will always be attached (up to 1 MB)

closes#16179

@s1gr1d
s1gr1dforce-pushed the sig/maxRequestBodySize branch from 560976f to 7a21af7CompareMay 7, 2025 17:17
@s1gr1d
s1gr1d requested a review from mydeaMay 7, 2025 17:18
@github-actions

github-actionsBot commented May 7, 2025

Copy link
Copy Markdown
Contributor

size-limit report 📦

PathSize% ChangeChange
@sentry/browser23.96 kB--
@sentry/browser - with treeshaking flags23.62 kB--
@sentry/browser (incl. Tracing)38.21 kB--
@sentry/browser (incl. Tracing, Replay)76.32 kB--
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags69.35 kB--
@sentry/browser (incl. Tracing, Replay with Canvas)81.09 kB--
@sentry/browser (incl. Tracing, Replay, Feedback)93.18 kB--
@sentry/browser (incl. Feedback)40.76 kB--
@sentry/browser (incl. sendFeedback)28.7 kB--
@sentry/browser (incl. FeedbackAsync)33.58 kB--
@sentry/react25.77 kB--
@sentry/react (incl. Tracing)40.21 kB--
@sentry/vue28.34 kB--
@sentry/vue (incl. Tracing)40 kB--
@sentry/svelte23.99 kB--
CDN Bundle25.17 kB--
CDN Bundle (incl. Tracing)38.23 kB--
CDN Bundle (incl. Tracing, Replay)74.11 kB--
CDN Bundle (incl. Tracing, Replay, Feedback)79.54 kB--
CDN Bundle - uncompressed73.44 kB--
CDN Bundle (incl. Tracing) - uncompressed113.15 kB--
CDN Bundle (incl. Tracing, Replay) - uncompressed227.11 kB--
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed239.93 kB--
@sentry/nextjs (client)41.86 kB--
@sentry/sveltekit (client)38.68 kB--
@sentry/node158.08 kB+0.06%+83 B 🔺
@sentry/node - without tracing97.97 kB+0.09%+79 B 🔺
@sentry/aws-serverless123.33 kB+0.07%+83 B 🔺

View base workflow run

*
* @default 'medium'
*/
maxRequestBodySize?: 'none' | 'small' | 'medium' | 'always';

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should we rename this to maxIncomingRequestBodySize? It is not clear right now that this only applies to incoming requests, not outgoing ones 😅

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I got the name from the general Sentry docs: https://develop.sentry.dev/sdk/expected-features/#attaching-request-body-in-server-sdks

To be uniform with other SDKs, it would be beneficial to keep the name, but I agree that it would be clearer with incoming. At least, the information is available in the JSDoc 😅

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we don't need to have the same name, if we think something else is better :) maybe you could also check with other sdk folks, if this also applies to outgoing requests in other implementations or just to incoming?

function patchRequestToCaptureBody(
req: http.IncomingMessage,
isolationScope: Scope,
maxRequestBodySize: 'none' | 'small' | 'medium' | 'always',

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

l: We could actually type this to omit none as allowed value, and then avoid the further check in here, as we actually guard agains this already before calling this?

if (event === 'data') {
DEBUG_BUILD && logger.log(INSTRUMENTATION_NAME, 'Handling request.on("data")');
if (DEBUG_BUILD) {
logger.log(INSTRUMENTATION_NAME, 'Handling request.on("data")');

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

l: Let's combine these into a single log line, e.g. Handling request.on("data") with maximum request body size ...

@s1gr1ds1gr1d changed the title feat(node): Add maxRequestBodySizefeat(node): Add maxIncomingRequestBodySizeMay 13, 2025
@s1gr1d
s1gr1d requested a review from mydeaMay 13, 2025 14:57
*
* @default 'medium'
*/
maxRequestBodySize?: 'none' | 'small' | 'medium' | 'always';

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

m: Just to confirm - you're still going to change the name here?

@s1gr1ds1gr1dMay 14, 2025

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ah thanks - seems like my push of the commit where I changed the naming didn't get through 😄

await runner.completed();
});

test('does not capture any request bodies with "none" setting and "ignoreIncomingRequestBody"', async () => {

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

does it make sense to combine these two? should we not combine the filter function with e.g. always setting? 🤔

Copy link
Copy Markdown
MemberAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I added this test because I was actually running into an issue 😄
I had a logic problem in the if condition and it was sending the request body.

It's basically testing that the if condition is correct: https://github.com/getsentry/sentry-javascript/pull/16225/files#diff-964fee03880b5de6d711130f1ad4111d04e194bc066ea1725b4e6b7c1c722a42R266

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

then this is great :D

@s1gr1d
s1gr1d requested a review from mydeaMay 15, 2025 07:45
@s1gr1d
s1gr1d merged commit 12c90d1 into developMay 15, 2025
@s1gr1d
s1gr1d deleted the sig/maxRequestBodySize branch May 15, 2025 14:00
s1gr1d added a commit to getsentry/sentry-docs that referenced this pull request May 20, 2025
…mingRequestBody` (#13698)
## DESCRIBE YOUR PR
Documents `ignoreIncomingRequestBody `:
getsentry/sentry-javascript#15959
Documents `maxIncomingRequestBodySize`:
getsentry/sentry-javascript#16225
## IS YOUR CHANGE URGENT? Help us prioritize incoming PRs by letting us know when the change needs
to go live.
- [ ] Urgent deadline (GA date, etc.): <!-- ENTER DATE HERE -->
- [ ] Other deadline: <!-- ENTER DATE HERE -->
- [x] None: Not urgent, can wait up to 1 week+
## SLA
- Teamwork makes the dream work, so please add a reviewer to your PRs.
- Please give the docs team up to 1 week to review your PR unless you've
added an urgent due date to it.
Thanks in advance for your help!
## PRE-MERGE CHECKLIST
*Make sure you've checked the following before merging your changes:*
- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)
bitsandfoxes pushed a commit to getsentry/sentry-docs that referenced this pull request Jul 3, 2025
…mingRequestBody` (#13698)
## DESCRIBE YOUR PR
Documents `ignoreIncomingRequestBody `:
getsentry/sentry-javascript#15959
Documents `maxIncomingRequestBodySize`:
getsentry/sentry-javascript#16225
## IS YOUR CHANGE URGENT? Help us prioritize incoming PRs by letting us know when the change needs
to go live.
- [ ] Urgent deadline (GA date, etc.): <!-- ENTER DATE HERE -->
- [ ] Other deadline: <!-- ENTER DATE HERE -->
- [x] None: Not urgent, can wait up to 1 week+
## SLA
- Teamwork makes the dream work, so please add a reviewer to your PRs.
- Please give the docs team up to 1 week to review your PR unless you've
added an urgent due date to it.
Thanks in advance for your help!
## PRE-MERGE CHECKLIST
*Make sure you've checked the following before merging your changes:*
- [ ] Checked Vercel preview for correctness, including links
- [ ] PR was reviewed and approved by any necessary SMEs (subject matter
experts)
- [ ] PR was reviewed and approved by a member of the [Sentry docs
team](https://github.com/orgs/getsentry/teams/docs)
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Node] Add maxRequestBodySize to SentryHttpIntegration

3 participants

@s1gr1d@mydea@Lms24