docs(pii): Add comments about conditionals around sending PII data (#16143)

Based on the docs work for the issue
getsentry/sentry-docs#13407, I went through
the repository and looked for places where a conditional check for
`sendDefaultPii` might be missing.

Author: s1gr1d

packages/cloudflare/src/sdk.ts

@@ -27,6 +27,7 @@ export function getDefaultIntegrations(options: CloudflareOptions): Integration[
     functionToStringIntegration(),
     linkedErrorsIntegration(),
     fetchIntegration(),
+    // TODO(v10): the `include` object should be defined directly in the integration based on `sendDefaultPii`
     requestDataIntegration(sendDefaultPii ? undefined : { include: { cookies: false } }),
     consoleIntegration(),
   ];

packages/core/src/integrations/requestdata.ts

@@ -21,6 +21,7 @@ type RequestDataIntegrationOptions = {
   include?: RequestDataIncludeOptions;
 };
 
+// TODO(v10): Change defaults based on `sendDefaultPii`
 const DEFAULT_INCLUDE: RequestDataIncludeOptions = {
   cookies: true,
   data: true,

packages/node/src/integrations/context.ts

@@ -61,6 +61,7 @@ const _nodeContextIntegration = ((options: ContextOptions = {}) => {
 
     const updatedContext = _updateContext(await cachedContext);
 
+    // TODO(v10): conditional with `sendDefaultPii` here?
     event.contexts = {
       ...event.contexts,
       app: { ...updatedContext.app, ...event.contexts?.app },

packages/replay-internal/src/coreHandlers/util/xhrUtils.ts

@@ -98,6 +98,8 @@ function _prepareXhrData(
     };
   }
 
+  // ---- This additional network data below is only captured for URLs defined in `networkDetailAllowUrls` ----
+
   const xhrInfo = xhr[SENTRY_XHR_DATA_KEY];
   const networkRequestHeaders = xhrInfo
     ? getAllowedHeaders(xhrInfo.request_headers, options.networkRequestHeaders)

packages/vercel-edge/src/sdk.ts

@@ -59,6 +59,7 @@ export function getDefaultIntegrations(options: Options): Integration[] {
     linkedErrorsIntegration(),
     winterCGFetchIntegration(),
     consoleIntegration(),
+    // TODO(v10): integration can be included - but integration should not add IP address etc
     ...(options.sendDefaultPii ? [requestDataIntegration()] : []),
   ];
 }