ssl/ezXSS

Limit the amount of disclosed information in alerts

Techbrunch opened this issue · 1 comments

Techbrunch commented

Hello,

It would be great if the admin could limit the amount of information included in alerts.

This would prevent potentially sensitive information to be stored in multiple location (email, slack, telegram, discord).

Ideally you should be able to set what to include, but the most sensitive fields we don't want in alerts are cookies, local & session storage, DOM, screenshot.

Thanks for the great tool

ssl commented

Hey @Techbrunch,

You can easily edit this yourself in the alerts templates.

Doing this as some checkbox in the admin would need big changes to how the code works, and I believe most people would not want to hide these items in the alerts. Nevertheless, the alerts templates are designed to be easily edited to your own liking.

  • 👍1