Function sanitizeQueryString

src/js/modules/sentry-init.js:551–567

(url)

        // 2. 脱敏 URL 中的敏感查询参数 + 删除敏感请求数据
        function sanitizeQueryString(url) {
          if (!url) return url;
          const sensitiveParams = ['token', 'key', 'password', 'code', 'state', 'access_token', 'refresh_token', 'auth', 'secret'];
          try {
            const urlObj = new URL(url, window.location.origin);
            // 先收集所有键再遍历，避免迭代时修改 searchParams 底层列表
            const keys = Array.from(urlObj.searchParams.keys());
            keys.forEach(key => {
              if (sensitiveParams.includes(key.toLowerCase())) {
                urlObj.searchParams.set(key, '***');
              }
            });
            return urlObj.toString();
          } catch (e) {
            return url.replace(/([?&])(token|key|password|code|state|access_token|refresh_token|auth|secret)=[^&]*/gi, '$1$2=***');
          }
        }

        if (event.request) {
          if (event.request.query_string) {