[Telemetry] Expand field sanitization to codedError.data

change/@react-native-windows-telemetry-d7dc63f1-c900-4229-bcb4-8d7cd683293c.json

@@ -0,0 +1,7 @@
+{
+  "type": "prerelease",
+  "comment": "Expand sanitization checks for error telemetry instances",
+  "packageName": "@react-native-windows/telemetry",
+  "email": "14967941+danielayala94@users.noreply.github.com",
+  "dependentChangeType": "patch"
+}

packages/@react-native-windows/telemetry/src/e2etest/telemetry.test.ts

@@ -391,6 +391,7 @@ function verifyTestCommandTelemetryProcessor(
             : 'Unknown',
         );
 
+        // NOTE: At this point, expectedError has been modified by trackException().
         expect(codedError.data).toStrictEqual(
           (expectedError as errorUtils.CodedError).data ?? {},
         );
@@ -694,3 +695,37 @@ test.each(testTelemetryOptions)(
     });
   },
 );
+
+test.each(testTelemetryOptions)(
+  'Telemetry run test command end to end with CodedError, verifies PII is scrubbed if present in CodedError.',
+  async options => {
+    await TelemetryTest.startTest(options);
+
+    const expectedError = new errorUtils.CodedError(
+      'MSBuildError', // type
+      'test error', // message
+      {
+        fieldWithPath:
+          'Test Error occurred at C:\\some\\file\\path\\project.build.appxrecipe', // expectation: replace the whole C:\\... thing with "[path]".
+        fieldWithNoPath: 'Test Error data', // expectation: no changes to this string.
+        fieldWithNoString: 14, // expectation: no changes to this value.
+      }, // data
+    );
+
+    const caughtErrors: Error[] = [];
+    TelemetryTest.addTelemetryInitializer(
+      verifyTestCommandTelemetryProcessor(
+        caughtErrors,
+        expectedError.type,
+        expectedError,
+      ),
+    );
+
+    await runTestCommandE2E(() => testCommandBody(expectedError));
+
+    TelemetryTest.endTest(() => {
+      // Check if any errors were thrown
+      expect(caughtErrors).toHaveLength(0);
+    });
+  },
+);

packages/@react-native-windows/telemetry/src/telemetry.ts

@@ -442,6 +442,21 @@ export class Telemetry {
       data: codedError?.data ?? {},
     };
 
+    // Scrub any potential PII present in codedError.data array, as long as the data is a string.
+    if (Object.keys(codedErrorStruct.data).length > 0) {
+      for (const field in codedErrorStruct.data) {
+        if (
+          codedErrorStruct.data.hasOwnProperty(field) &&
+          typeof codedErrorStruct.data[field] === 'string'
+        ) {
+          const sanitizedError = errorUtils.sanitizeErrorMessage(
+            codedErrorStruct.data[field],
+          );
+          codedErrorStruct.data[field] = sanitizedError;
+        }
+      }
+    }
+
     // Copy msBuildErrorMessages into the codedError.data object
     if ((error as any).msBuildErrorMessages) {
       // Always grab MSBuild error codes if possible