ASP.NET Core uses a fixed list of sensitive query parameters whose values are replaced with REDACTED in the OpenTelemetry url.query attribute.
Support overriding this list through the OpenTelemetry-aligned environment variable:
OTEL_INSTRUMENTATION_SANITIZATION_URL_EXPERIMENTAL_SENSITIVE_QUERY_PARAMETERS (the same precedent as for known http methods. We may expose configuration via public api as well)
The value should be a comma-separated, case-sensitive list that completely replaces the built-in defaults, matching OpenTelemetry's sensitive_query_parameters contract.
When the variable is absent, ASP.NET Core should continue using its built-in list. Microsoft.AspNetCore.Hosting.SuppressActivityUrlQuery should continue to suppress the url.query attribute entirely.
ASP.NET Core uses a fixed list of sensitive query parameters whose values are replaced with
REDACTEDin the OpenTelemetryurl.queryattribute.Support overriding this list through the OpenTelemetry-aligned environment variable:
OTEL_INSTRUMENTATION_SANITIZATION_URL_EXPERIMENTAL_SENSITIVE_QUERY_PARAMETERS(the same precedent as for known http methods. We may expose configuration via public api as well)The value should be a comma-separated, case-sensitive list that completely replaces the built-in defaults, matching OpenTelemetry's
sensitive_query_parameterscontract.When the variable is absent, ASP.NET Core should continue using its built-in list.
Microsoft.AspNetCore.Hosting.SuppressActivityUrlQueryshould continue to suppress theurl.queryattribute entirely.