Remove IDs from the url when fetching permissions #793
Labels
Area: Permissions
Area: Telemetry
priority:p1
High priority but not blocking. Causes major but not critical loss of functionality SLA <=7days.
promote
type:bug
Something isn't working
Is your feature request related to a problem? Please describe.
A URL sent to the permissions endpoint could have user data. To re-enable telemetry on the devx API, we need to redact the information from the URL similar to work done in auto-complete.
Describe the solution you'd like
Sanitize the URL before sending it to the devx API
Describe alternatives you've considered
Current: Turn off telemetry in the devx api
Additional context
This may not fully allow turning on telemetry for the Devx API since more work may be needed there. But the blocker from Graph Explorer would be removed
AB#7597
The text was updated successfully, but these errors were encountered: