Security

Capturing a bug in the browser: wrapping fetch, XHR and console (and redacting PII first)

A screen recording shows what broke, not the console error or failed request behind it. How to capture those by wrapping fetch/XHR/console without breaking the page — and strip passwords, tokens and card numbers client-side before anything leaves the browser.