fix(opentelemetry): [Data Collection 21] Exclude queries from span descriptions

[adinauer]

PR Stack (Data Collection)

• feat(core): Data Collection #5759
• feat(core): [Data Collection 1] Add configuration types #5760
• feat(core): [Data Collection 2] Expose SentryOptions API #5761
• feat(core): [Data Collection 3] Add policy resolver #5799
• feat(graphql): [Data Collection 4] Apply GraphQL policies #5800
• feat(database): [Data Collection 5] Apply query policy #5801
• feat(spring): [Data Collection 6] Apply incoming request body policy #5802
• feat(apollo): [Data Collection 7] Apply incoming response body policy #5803
• feat(apollo): [Data Collection 8] Apply outgoing request body policy #5804
• feat(graphql): [Data Collection 9] Apply outgoing response body policy #5805
• feat(http): [Data Collection 10] Apply request header policy #5806
• feat(http): [Data Collection 11] Apply response header policy #5807
• feat(http): [Data Collection 12] Apply query parameter policy #5810
• feat(http): [Data Collection 13] Apply cookie collection policy #5811
• feat(user): [Data Collection 14] Apply user information policy #5812
• fix(android): [Data Collection 15] Scope device info cache to SDK options #5831
• test(replay): [Data Collection 16] Keep Replay independent #5832
• fix(android): [Data Collection 17] Apply user info policy to distinct ID #5833
• fix(spring): [Data Collection 18] Bind key-value policies #5834
• fix(android): [Data Collection 19] Preserve installation ID #5937
• fix(ktor): [Data Collection 20] Exclude query parameters from span descriptions #5983
• fix(opentelemetry): [Data Collection 21] Exclude queries from span descriptions #5985

---

📜 Description

Exclude URL query parameters and fragments from OpenTelemetry HTTP span descriptions when the description falls back to url.full or legacy http.target.

Parse those values through the shared UrlUtils path and use their URL-only representation for the derived Sentry description. Preserve the original completed OpenTelemetry attributes and the existing precedence of http.route, http.target, url.full, and url.path.

💡 Motivation and Context

OpenTelemetry spans could use complete URL or request-target values as their descriptions, attaching sensitive query values and producing high-cardinality descriptions. Other Java HTTP integrations already use URL-only span descriptions.

This normalization only changes the derived Sentry description. Data Collection is not applied to completed OpenTelemetry attributes because the exporter cannot distinguish manually supplied attributes from values added by auto-instrumentation.

Refs #5666

💚 How did you test it?

• ./gradlew :sentry-opentelemetry:sentry-opentelemetry-core:test --tests '*OpenTelemetryAttributesExtractorTest' --tests '*SpanDescriptionExtractorTest'
• ./gradlew spotlessApply apiDump
• git diff --check

📝 Checklist

• I added GH Issue ID & Linear ID
• I added tests to verify the changes.
• No new PII added or SDK only sends newly added PII if sendDefaultPII is enabled.
• I updated the docs if needed.
• I updated the wizard if needed.
• Review from the native team if needed.
• No breaking change or entry added to the changelog.
• No breaking change for hybrid SDKs or communicated to hybrid SDKs.
• Public API changes reviewed by another Mobile SDK team member or implemented according to the develop docs spec.

🔮 Next steps

Document that completed OpenTelemetry attributes are governed by OpenTelemetry configuration rather than Sentry Data Collection options.

#skip-changelog

⚠️ Merge this PR using a merge commit (not squash). Only the collection branch is squash-merged into main.

[github-actions]

Semver Impact of This PR

🟢 Patch (bug fixes)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

---

This PR will not appear in the changelog.

---

_{🤖 This preview updates automatically when you update the PR.}

[sentry]

📲 Install Builds

Android

🔗 App Name	App ID	Version	Configuration
SDK Size	io.sentry.tests.size	8.48.0 (1)	release

⚙️ sentry-android Build Distribution Settings

[github-actions]

Performance metrics 🚀

	Plain	With Sentry	Diff
Startup time	310.83 ms	361.78 ms	50.95 ms
Size	0 B	0 B	0 B

Baseline results on branch: fix/data-collection-ktor-span-description

Startup times

Revision	Plain	With Sentry	Diff
b4250aa	325.47 ms	381.65 ms	56.18 ms
194e34e	387.61 ms	453.48 ms	65.87 ms

App size

Revision	Plain	With Sentry	Diff
b4250aa	0 B	0 B	0 B
194e34e	0 B	0 B	0 B

Previous results on branch: fix/data-collection-opentelemetry-span-description

Startup times

Revision	Plain	With Sentry	Diff
4825c14	308.10 ms	366.35 ms	58.24 ms

App size

Revision	Plain	With Sentry	Diff
4825c14	0 B	0 B	0 B