Description
Summary
Currently the Enhanced Security setting limits the information presented in the initial issue notification email. However, this doesn't appear to apply to the regression email which includes a digest of the issue. This regression digest could include private information, resulting in a data leak to the email host.
Motivation
The Enhanced Security setting along with email subject template works great for censoring information out of initial issue notifications. However, we have had security issues due to PII being included in the regression email. Without a way to limit the information exposed in the regression email we would have to turn those emails off, which isn't ideal.
Additional Context
Note that we are running sentry 9.1.1 -- I wasn't able to find any evidence that this has been fixed in more recent versions, but I'd be happy to upgrade if that's the case.