Function sanitizeQueryString

src/js/sentry-loader.js:608–624

(url)

          // 2. 脱敏 URL 中的敏感查询参数
          function sanitizeQueryString(url) {
            if (!url) return url;
            var sensitiveParams = ['token', 'key', 'password', 'code', 'state', 'access_token', 'refresh_token', 'auth', 'secret'];
            try {
              var urlObj = new URL(url, window.location.origin);
              // 大小写不敏感匹配：先收集所有键再遍历
              var paramKeys = Array.from(urlObj.searchParams.keys());
              paramKeys.forEach(function(key) {
                if (sensitiveParams.indexOf(key.toLowerCase()) !== -1) {
                  urlObj.searchParams.set(key, '***');
                }
              });
              return urlObj.toString();
            } catch (e) {
              return url.replace(/([?&])(token|key|password|code|state|access_token|refresh_token|auth|secret)=[^&]*/gi, '$1$2=***');
            }
          }

          if (event.request) {
            if (event.request.query_string) {