Sessions and secrets

Session context

At the start of a recording BugTrail notes the window size, language, timezone, device pixel ratio and user agent. Replay restores what it can and warns about differences.

Cookies and storage

Cookie, localStorage and sessionStorage values are stored only when you tick Include session values. Otherwise only names are saved and secretsIncluded is false.

Passwords

Password fields and fields whose name looks secret are always saved as ***. At replay time supply the real value:

• Replay command: BUGTRAIL_SECRETS
• Generated scripts: BUGTRAIL_SECRET_<FIELD>

Jira attachments

The recording attached to a Jira issue has cookie and storage values removed.

Rules of thumb

• Treat a recording with session values like a password.
• Never paste tokens into issues.
• Keep API tokens in environment variables or CI secrets.