[Question] Is it possible to hide secrets from trace viewer?

[ValorHeart]

While logging into my application, the input field contains a password which is a secret that I prefer to hide, is it possible to hide it in the trace viewer?

[MindaugasMateika]

This is not the first issue regarding this issue and I would very much need such feature myself. An option for fill and type to mask the inputted value from reports and traces would be a life saver. Something like:

await someLocator.fill('secret text', { maskInReport: true })

[aslushnikov]

While logging into my application, the input field contains a password which is a secret that I prefer to hide, is it possible to hide it in the trace viewer?

Adi Gal (@ValorHeart) there's no way to do so. Even if we mask if from the step itself, we cannot guarantee that

• there's no DOM element that holds the sensitive value (e.g. form input value)
• there's no HTTP request that carried the sensitive value over
• there's no console message that dumped the value

and so on. Traces also store login cookies that can be used to login to the service.

All in all, filtering traces for sensitive information is an uphill battle. I'd recommend against sharing sensitive traces with untrusted parties.

[MindaugasMateika]

The mentioned cases are out of scope for Playwright but what is within the scope is to not leak sensitive data in .fill or .type logs. It's a bit dissapointing that these issues are simply closed (this is not the first) because it would certainly get upvotes and is needed by community.

[chuanqisun]

Agree with mindaugasm (@MindaugasMateika)

Just an idea: grep all environment variable (by their values) and remove them from the output folder. It isn't too hard to implement and will make the trace sharing more secure for everyone. Please re-consider this feature request.

It seems like Cypress supports it. https://stackoverflow.com/questions/50568526/is-there-any-way-to-hide-a-log-in-cypress

[carlnoval]

Posted about something similar in discussion: https://github.com/microsoft/playwright/discussions/20902 before finding this thread. Though implementation would be an uphill battle, this feature would greatly help with security especially when sharing reports with steak holders.

Please re-consider this feature request.

[jpinheiro27]

This feature should be a must have in terms of security, please could you re-consider it?