Reduce sensitive data exposure with build-time allowlists

Datadog’s build-time allowlisting feature enables engineering teams to balance data privacy with observability by protecting sensitive, runtime-generated information while preserving readable RUM action names. A build plugin extracts static, non-sensitive strings during the build process to create an allowlist, which the Browser SDK then uses to automatically mask any unknown or dynamic text. This approach integrates seamlessly into existing CI/CD pipelines, reducing the risk of manual configuration errors and accidental data exposure.