fix: improve network body parsing and truncation handling by markushi · Pull Request #4958 · getsentry/sentry-java

markushi · 2025-12-09T13:34:11Z

📜 Description

This PR refactors the NetworkBody class and improves how network request/response bodies are parsed and handled, particularly for large or truncated content.

Key changes:

Simplified NetworkBody from an interface with multiple implementations to a single class with a body field and optional warnings list
Added NetworkBodyWarning enum to communicate parsing issues (JSON_TRUNCATED, TEXT_TRUNCATED, INVALID_JSON, BODY_PARSE_ERROR)
Improved truncation handling in NetworkBodyParser to properly detect and mark truncated content
Switched from JsonObjectReader to vendor JsonReader for more robust JSON parsing
Updated SentryOkHttpInterceptor to peek at the correct amount of bytes to detect truncation

💡 Motivation and Context

Previously, the network body parsing had issues with:

Inconsistent handling of truncated content
No way to communicate parse warnings to consumers
Less robust JSON parsing

This change provides a cleaner API and better error/warning reporting.

💚 How did you test it?

Existing tests should pass
Manual testing with large response bodies

📝 Checklist

I added GH Issue ID & Linear ID
I added tests to verify the changes.
No new PII added or SDK only sends newly added PII if sendDefaultPII is enabled.
I updated the docs if needed.
I updated the wizard if needed.
Review from the native team if needed.
No breaking change or entry added to the changelog.
No breaking change for hybrid SDKs or communicated to hybrid SDKs.

🔮 Next steps

🤖 Generated with Claude Code

🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

sentry-okhttp/src/main/java/io/sentry/okhttp/SentryOkHttpInterceptor.kt

sentry/src/main/java/io/sentry/util/network/NetworkBody.java

sentry/src/main/java/io/sentry/util/network/NetworkBodyParser.java

sentry-okhttp/src/main/java/io/sentry/okhttp/SentryOkHttpInterceptor.kt

sentry/src/main/java/io/sentry/util/network/NetworkBodyParser.java

sentry-okhttp/src/main/java/io/sentry/okhttp/SentryOkHttpInterceptor.kt

sentry/src/main/java/io/sentry/util/network/NetworkBodyParser.java

github-actions · 2025-12-09T14:02:01Z

Performance metrics 🚀

	Plain	With Sentry	Diff
Startup time	307.73 ms	340.94 ms	33.21 ms
Size	1.58 MiB	2.13 MiB	559.07 KiB

Baseline results on branch: main

Startup times

Revision	Plain	With Sentry	Diff
`fc5ccaf`	276.52 ms	370.46 ms	93.93 ms
`91bb874`	311.00 ms	363.47 ms	52.47 ms
`fc5ccaf`	279.11 ms	353.34 ms	74.23 ms
`d364ace`	384.53 ms	453.51 ms	68.98 ms
`3d205d0`	352.15 ms	432.53 ms	80.38 ms
`dba088c`	320.59 ms	361.29 ms	40.70 ms
`fc5ccaf`	256.80 ms	322.36 ms	65.56 ms
`ee747ae`	382.73 ms	435.41 ms	52.68 ms
`fcec2f2`	314.96 ms	373.66 ms	58.70 ms
`ae7fed0`	293.84 ms	380.22 ms	86.38 ms

App size

Revision	Plain	With Sentry	Diff
`fc5ccaf`	1.58 MiB	2.13 MiB	557.54 KiB
`91bb874`	1.58 MiB	2.13 MiB	559.07 KiB
`fc5ccaf`	1.58 MiB	2.13 MiB	557.54 KiB
`d364ace`	1.58 MiB	2.11 MiB	539.75 KiB
`3d205d0`	1.58 MiB	2.10 MiB	532.97 KiB
`dba088c`	1.58 MiB	2.13 MiB	558.99 KiB
`fc5ccaf`	1.58 MiB	2.13 MiB	557.54 KiB
`ee747ae`	1.58 MiB	2.10 MiB	530.95 KiB
`fcec2f2`	1.58 MiB	2.12 MiB	551.50 KiB
`ae7fed0`	1.58 MiB	2.12 MiB	551.77 KiB

Previous results on branch: fix/network-request-response-body-parsing

Startup times

Revision	Plain	With Sentry	Diff
`99d7a28`	292.30 ms	347.96 ms	55.66 ms
`8287b45`	308.53 ms	359.32 ms	50.79 ms

App size

Revision	Plain	With Sentry	Diff
`99d7a28`	1.58 MiB	2.13 MiB	559.07 KiB
`8287b45`	1.58 MiB	2.13 MiB	559.07 KiB

sentry-okhttp/src/main/java/io/sentry/okhttp/SentryOkHttpInterceptor.kt

sentry/src/main/java/io/sentry/util/network/NetworkBodyParser.java

...ry-android-replay/src/main/java/io/sentry/android/replay/DefaultReplayBreadcrumbConverter.kt

sentry/src/test/java/io/sentry/util/network/NetworkBodyParserTest.kt

CHANGELOG.md

romtsn · 2025-12-11T22:45:51Z

sentry/src/main/java/io/sentry/util/network/NetworkBody.java

-    private final @NotNull String value;
+  // Based on
+  // https://github.com/getsentry/sentry/blob/ccb61aa9b0f33e1333830093a5ce3bd5db88ef33/static/app/utils/replays/replay.tsx#L5-L12
+  public enum NetworkBodyWarning {


so we can't exactly match all of the reasons on Android?

Some of them simply don't make sense on mobile, like BODY_PARSE_TIMEOUT. So I only added those which we actually use

romtsn · 2025-12-12T00:03:50Z

sentry/src/main/java/io/sentry/util/network/NetworkBodyParser.java

        }
+        return new NetworkBody(data, warnings);
+      }
+    } catch (Exception e) {


so we still wanna catch Exception and not Throwable?

I've read up on this and it seems like it's not safe it simply catch a StackOverflow as the JVM could be in an inconsistent state. I've added a max_depth const for parsing instead and combined with the truncation I think we have enough safe guards in place now.

wondering if we this is already a problem elsewhere where we catch Throwables 😅

romtsn

LGTM!

Co-authored-by: Roman Zavarnitsyn <rom4ek93@gmail.com>

43jay · 2025-12-12T16:50:05Z

sentry/src/main/java/io/sentry/util/network/NetworkBodyParser.java

+              reader.endObject();
+            } catch (Exception e) {
+              result.errored = true;
+              return map;


nit: unnecessary return

43jay

looks great!, and confirmed that

works as expected for SecondActivity on my device (when string value is truncated/malformed SR)
WAE when key name is truncated/malformed (malformed keys) SR

cursor · 2025-12-15T09:18:14Z

sentry/src/main/java/io/sentry/util/network/NetworkBodyParser.java

-    } catch (UnsupportedEncodingException e) {
-      return NetworkBody.fromString(
-          "[Failed to decode truncated bytes, " + bytes.length + " bytes]");
    }


Bug: Form URL parsing doesn't catch URLDecoder IllegalArgumentException

The parseFormUrlEncoded method catches only UnsupportedEncodingException, but URLDecoder.decode() can also throw IllegalArgumentException when the input contains malformed percent-encoded sequences (e.g., truncated %2 instead of %20). This is inconsistent with parseJson, which catches all Exception types. When parsing truncated form-urlencoded data that cuts in the middle of a percent-encoded character, the exception will propagate instead of returning a NetworkBody with BODY_PARSE_ERROR warning. The catch clause at line 164 needs to catch Exception to match the robust error handling in parseJson.

…ents (#15851) ## DESCRIBE YOUR PR [ANDROID-250: Fix Network Body parsing logic for large JSON bodies](https://linear.app/getsentry/issue/ANDROID-250/fix-network-body-parsing-logic-for-large-json-bodies) will cause a RuntimeException when parsing certain large JSON payloads. _SentryReplayOptions.MAX_NETWORK_BODY_SIZE <= json payload size < 2*SentryReplayOptions.MAX_NETWORK_BODY_SIZE_ 1. Fixed in [#4958](getsentry/sentry-java#4958) so updating docs for minimum required sdk version. 2. Also adding reference to required gradle version. ## IS YOUR CHANGE URGENT? Help us prioritize incoming PRs by letting us know when the change needs to go live. - [ ] Urgent deadline (GA date, etc.):  - [x] Other deadline: _ASAP - minor change, would like to share docs with potential adopters._ - [ ] None: Not urgent, can wait up to 1 week+ ## PRE-MERGE CHECKLIST *Make sure you've checked the following before merging your changes:* - [ ] Checked Vercel preview for correctness, including links - [x] PR was reviewed and approved by any necessary SMEs (subject matter experts) - [ ] PR was reviewed and approved by a member of the [Sentry docs team](https://github.com/orgs/getsentry/teams/docs)

fix: improve network body parsing and truncation handling

fefa054

🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

markushi requested review from adinauer, lcian and romtsn as code owners December 9, 2025 13:34

chore: update CHANGELOG for #4958

e4a26ff

🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

sentry bot reviewed Dec 9, 2025

View reviewed changes

sentry-okhttp/src/main/java/io/sentry/okhttp/SentryOkHttpInterceptor.kt Outdated Show resolved Hide resolved

sentry/src/main/java/io/sentry/util/network/NetworkBody.java Show resolved Hide resolved

cursor bot reviewed Dec 9, 2025

View reviewed changes

Minor cleanup

a7508bc

sentry bot reviewed Dec 9, 2025

View reviewed changes

sentry/src/main/java/io/sentry/util/network/NetworkBodyParser.java Show resolved Hide resolved

markushi and others added 2 commits December 9, 2025 14:44

Update tests

7901ded

Format code

0546ab9

sentry bot reviewed Dec 9, 2025

View reviewed changes

sentry-okhttp/src/main/java/io/sentry/okhttp/SentryOkHttpInterceptor.kt Show resolved Hide resolved

cursor bot reviewed Dec 9, 2025

View reviewed changes

sentry/src/main/java/io/sentry/util/network/NetworkBodyParser.java Show resolved Hide resolved

romtsn requested a review from 43jay December 9, 2025 14:28

43jay reviewed Dec 9, 2025

View reviewed changes

sentry-okhttp/src/main/java/io/sentry/okhttp/SentryOkHttpInterceptor.kt Show resolved Hide resolved

43jay reviewed Dec 9, 2025

View reviewed changes

sentry-okhttp/src/main/java/io/sentry/okhttp/SentryOkHttpInterceptor.kt Show resolved Hide resolved

Address PR comments

7558da3

sentry bot reviewed Dec 10, 2025

View reviewed changes

sentry/src/main/java/io/sentry/util/network/NetworkBodyParser.java Show resolved Hide resolved

cursor bot reviewed Dec 10, 2025

View reviewed changes

...ry-android-replay/src/main/java/io/sentry/android/replay/DefaultReplayBreadcrumbConverter.kt Show resolved Hide resolved

sentry/src/test/java/io/sentry/util/network/NetworkBodyParserTest.kt Show resolved Hide resolved

Merge branch 'main' into fix/network-request-response-body-parsing

a71499a

markushi requested a review from 43jay December 11, 2025 08:17

romtsn reviewed Dec 11, 2025

View reviewed changes

CHANGELOG.md Outdated Show resolved Hide resolved

romtsn reviewed Dec 11, 2025

View reviewed changes

romtsn reviewed Dec 12, 2025

View reviewed changes

romtsn approved these changes Dec 12, 2025

View reviewed changes

markushi and others added 2 commits December 12, 2025 10:22

Improve JSON null handling and truncation detection

43e259d

Update CHANGELOG.md

3b4df61

Co-authored-by: Roman Zavarnitsyn <rom4ek93@gmail.com>

43jay reviewed Dec 12, 2025

View reviewed changes

43jay approved these changes Dec 12, 2025

View reviewed changes

Merge branch 'main' into fix/network-request-response-body-parsing

e00e4ff

markushi enabled auto-merge (squash) December 15, 2025 09:11

cursor bot reviewed Dec 15, 2025

View reviewed changes

markushi merged commit b01b11a into main Dec 15, 2025
61 of 62 checks passed

markushi deleted the fix/network-request-response-body-parsing branch December 15, 2025 10:23

43jay mentioned this pull request Dec 17, 2025

docs(android): Update Session Replay Network Details version requirements getsentry/sentry-docs#15851

Merged

6 tasks

Uh oh!

Conversation

markushi commented Dec 9, 2025

📜 Description

💡 Motivation and Context

💚 How did you test it?

📝 Checklist

🔮 Next steps

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

github-actions bot commented Dec 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Performance metrics 🚀

Baseline results on branch: main

Startup times

App size

Previous results on branch: fix/network-request-response-body-parsing

Startup times

App size

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

romtsn Dec 11, 2025

Choose a reason for hiding this comment

Uh oh!

markushi Dec 12, 2025

Choose a reason for hiding this comment

Uh oh!

romtsn Dec 12, 2025

Choose a reason for hiding this comment

Uh oh!

markushi Dec 12, 2025

Choose a reason for hiding this comment

Uh oh!

romtsn Dec 12, 2025

Choose a reason for hiding this comment

Uh oh!

romtsn left a comment

Choose a reason for hiding this comment

Uh oh!

43jay Dec 12, 2025

Choose a reason for hiding this comment

Uh oh!

43jay left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

cursor bot Dec 15, 2025

Choose a reason for hiding this comment

Bug: Form URL parsing doesn't catch URLDecoder IllegalArgumentException

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

github-actions bot commented Dec 9, 2025 •

edited

Loading

43jay left a comment •

edited

Loading