C2 Sensitive field redaction
Recorder must NOT capture cleartext values for password, phone, or credit-card fields.
Email
Password
Phone
Card number
CVC