Open
Description
Submitted By: josh.fike
Topic: Security
Team: Tier 1 Support
Are vets-api
sidekiq args scrubbed for PII in the sidekiq web interface or datadog?
In a PR review someone mentioned that for every instance of code using VANotify::EmailJob
that the email address was sent as an argument and other PII could be present in the personalisation
hash. There is a lot of code with first_name
within the personalisation
hash.
Is all of this visible in the places mentioned above and is it an issue? I'm sorry if this has been asked before, I didn't find a reference to it.
Activity