Skip to content

[Due for payment 2025-09-19] [$250] Tighten the onyx export masking logic #70107

Description

@mountiny

From here

Background

Currently some fields are left behind in state masking which is a security vulnerability. We need to make sure that no private information is shared when exporting one's Onyx state through Troubleshoot.

Problem

When users export their Onyx state through the Troubleshoot feature, sensitive personal data remains visible in the exported text files, which creates a security vulnerability that could lead to unauthorized account access.

Solution

Expand the masking rules so that no private information is shared when exporting one’s Onyx state through Troubleshoot.
You can find the list of keys in attached file. This is not sensitive information per se, but its not needed for the purpose of exporting the onyx state so we can mask it

Issue OwnerCurrent Issue Owner: @dylanexpensify
Upwork Automation - Do Not Edit
  • Upwork Job URL: https://www.upwork.com/jobs/~021965074993794679004
  • Upwork Job ID: 1965074993794679004
  • Last Price Increase: 2025-09-08

Metadata

Metadata

Labels

Awaiting PaymentAuto-added when associated PR is deployed to productionBugSomething is broken. Auto assigns a BugZero manager.DailyKSv2ExternalAdded to denote the issue can be worked on by a contributor

Type

No type

Fields

No fields configured for issues without a type.

Projects

Status
Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions