Skip to content

feat(remix)!: Do not double gate action form data capture - #23014

Open
chargome wants to merge 1 commit into
developfrom
charlygomez/js-2666-v11-do-not-double-gate-actionformdataattributes
Open

feat(remix)!: Do not double gate action form data capture#23014
chargome wants to merge 1 commit into
developfrom
charlygomez/js-2666-v11-do-not-double-gate-actionformdataattributes

Conversation

@chargome

@chargome chargome commented Aug 4, 2026

Copy link
Copy Markdown
Member

captureActionFormDataKeys previously only took effect when dataCollection.httpBodies also included 'incomingRequest' (double opt-in) . It now opts in on its own, and takes precedence over dataCollection. Setting only httpBodies captures all fields, which is the new default in v11.

Values with a sensitive-looking field name (password, token, …) are replaced with [Filtered], including explicitly allowlisted ones.

closes #21295

@chargome chargome self-assigned this Aug 4, 2026
@linear-code

linear-code Bot commented Aug 4, 2026

Copy link
Copy Markdown

JS-2666

@chargome

chargome commented Aug 4, 2026

Copy link
Copy Markdown
Member Author

bugbot run

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

Reviewed by Cursor Bugbot for commit 7ff5998. Configure here.

@github-actions

github-actions Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

size-limit report 📦

⚠️ Warning: Base artifact is not the latest one, because the latest workflow run is not done yet. This may lead to incorrect results. Try to re-run all tests to get up to date results.

Path Size % Change Change
@sentry/browser 29.8 kB - -
@sentry/browser - with treeshaking flags 28.02 kB - -
@sentry/browser (incl. Tracing) 47.2 kB - -
@sentry/browser (incl. Tracing + Span Streaming) 47.21 kB - -
@sentry/browser (incl. Tracing, Profiling) 51.94 kB - -
@sentry/browser (incl. Tracing, Replay) 86.52 kB - -
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 75.96 kB - -
@sentry/browser (incl. Tracing, Replay with Canvas) 91.24 kB - -
@sentry/browser (incl. Tracing, Replay, Feedback) 103.88 kB - -
@sentry/browser (incl. Feedback) 47.1 kB - -
@sentry/browser (incl. sendFeedback) 34.64 kB - -
@sentry/browser (incl. FeedbackAsync) 39.75 kB - -
@sentry/browser (incl. Metrics) 30.87 kB - -
@sentry/browser (incl. Logs) 31.11 kB - -
@sentry/browser (incl. Metrics & Logs) 31.78 kB - -
@sentry/react 31.59 kB - -
@sentry/react (incl. Tracing) 49.44 kB - -
@sentry/vue 34.87 kB - -
@sentry/vue (incl. Tracing) 49.18 kB - -
@sentry/svelte 29.82 kB - -
CDN Bundle 31.87 kB - -
CDN Bundle (incl. Tracing) 47.52 kB - -
CDN Bundle (incl. Logs, Metrics) 33.41 kB - -
CDN Bundle (incl. Tracing, Logs, Metrics) 48.94 kB - -
CDN Bundle (incl. Replay, Logs, Metrics) 72.75 kB - -
CDN Bundle (incl. Tracing, Replay) 85.19 kB - -
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 86.49 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback) 91.01 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 92.32 kB - -
CDN Bundle - uncompressed 94.7 kB - -
CDN Bundle (incl. Tracing) - uncompressed 142.16 kB - -
CDN Bundle (incl. Logs, Metrics) - uncompressed 99.32 kB - -
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 146.13 kB - -
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 224.02 kB - -
CDN Bundle (incl. Tracing, Replay) - uncompressed 261.41 kB - -
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed 265.38 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 275.12 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed 279.07 kB - -
@sentry/nextjs (client) 52.01 kB - -
@sentry/sveltekit (client) 47.63 kB - -
@sentry/core/server 65.5 kB - -
@sentry/core/browser 51.84 kB - -
@sentry/node 120.19 kB -0.38% -458 B 🔽
@sentry/node/import (ESM hook with diagnostics-channel injection) 0 B added added
@sentry/node - without tracing 83.64 kB -0.47% -394 B 🔽
@sentry/aws-serverless 92.3 kB -0.42% -389 B 🔽
@sentry/cloudflare (withSentry) - minified 218.64 kB - -
@sentry/cloudflare (withSentry) 538.65 kB - -

View base workflow run

`captureActionFormDataKeys` previously only took effect when
`dataCollection.httpBodies` also included `'incomingRequest'`. It now opts in on its
own, and takes precedence over `dataCollection`. Setting only `httpBodies` captures
all fields.

Values with a sensitive-looking field name (`password`, `token`, …) are replaced with
`[Filtered]`, including explicitly allowlisted ones.

Fixes #21295

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@chargome
chargome force-pushed the charlygomez/js-2666-v11-do-not-double-gate-actionformdataattributes branch from 7ff5998 to a5efc13 Compare August 4, 2026 13:37
@chargome
chargome marked this pull request as ready for review August 4, 2026 13:53
@chargome
chargome requested a review from a team as a code owner August 4, 2026 13:53
@chargome
chargome requested review from andreiborza, nicohrubec and s1gr1d and removed request for a team and s1gr1d August 4, 2026 13:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[v11] Do not double gate actionFormDataAttributes

2 participants