Sentry for ASP.NET Framework is capturing querystring parameters and shouldn't

[mattjohnsonpint]

Package

Sentry.AspNet

.NET Flavor

.NET Framework

.NET Version

4.x (any)

OS

Windows

SDK Version

3.31.0

Steps to Reproduce

Create an ASP.NET Framework application (requires Windows). Use any version of .NET Framework, such as .NET Framework 4.8.

Add Sentry.AspNet, and integrate per docs at https://docs.sentry.io/platforms/dotnet/guides/aspnet/

In a controller method that accepts parameters, capture an exception.

Run the app, and invoke the controller - passing parameters on the querystring. For example: http://localhost/api/values?id=1234

Expected Result

The error should be capture, and the request context should include the URL as http://localhost/api/values - without parameters.

This is per the dev docs: https://develop.sentry.dev/sdk/event-payloads/request/

The data variable should only contain the request body (not the query string).

Actual Result

The querystring data is captured and included in the request context.

Note: This is for ASP.NET Framework only. The ASP.NET Core integration is handling this properly.

[mattjohnsonpint]

I appear to have misread the spec. This is allowed. nevermind...