Android Session Replay Masking Not Working as Expected

[ajithkumar25b]

Integration

sentry-android

Build System

Gradle

AGP Version

8.6.0

Proguard

Enabled

Version

8.1.0

We have enabled Session Replay masking in our Android application, but it's not working as expected. The masking is sometimes misaligned, and certain UI elements—like popup texts—are not masked at all.This issue raises privacy concerns, as sensitive information might be visible in the session recordings.

Configuration:
Here is our current Session Replay masking configuration:
private fun handleSessionReplay(options: SentryAndroidOptions) { options.sessionReplay.setMaskAllImages(true) options.sessionReplay.setMaskAllText(true) options.sessionReplay.onErrorSampleRate = 1.0 options.sessionReplay.sessionSampleRate = 1.0 }

Additional Notes :

• Due to privacy policies, I cannot provide screenshots of the issue.
• Please let me know if there are any known workarounds or additional configurations needed to ensure masking works as expected.

Would appreciate any insights or fixes on this, Thanks!!

Expected Result

• All text fields and sensitive elements should be masked correctly.
• Masking should be applied consistently across the app, including popup texts.

Actual Result

Issues Observed:

• Masking Misalignment: In some cases, the mask does not cover the correct area, causing sensitive information to be partially visible.
• Missing Masking on Popups: Some UI elements, especially popup texts and tooltips, are not masked even though they should be.

[romtsn]

hi @ajithkumar25b thanks for opening the issue. Unfortunately, it is not enough information for us to understand where the issue is. We'd at least need screenshots and potentially a view hierarchy snapshot from you to investigate the issue. If it helps you could send those details to roman@sentry.io.

Missing Masking on Popups: Some UI elements, especially popup texts and tooltips, are not masked even though they should be.

Would also be helpful if you specify exactly how those UI elements are built - e.g. with Jetpack Compose or normal views, are those Toasts/Dialogs or something else, etc.

[ajithkumar25b]

@romtsn ,

Would also be helpful if you specify exactly how those UI elements are built - e.g. with Jetpack Compose or normal views, are those Toasts/Dialogs or something else, etc.

We are using AlertDialog.Builder for the popups