Akamai EdgeWorker changelog

4.9.1

Fixed

• Fixed URLs containing special characters being reported without a domain or path on risk_api activities.

4.9.0

Added

• Added Hard Block support: split the Hard Block response into a minimal inline stub + a NetStorage-hosted script (b.js), mirroring the existing CAPTCHA block page pattern, so that Hard Block (action b) works within Akamai’s onClientRequest 2048-character response size limit.
  • Note that this requires uploading the new netstorage/px/b.js file to NetStorage alongside the existing c.js.

Version 4.8.0

Added

• Added support for handling multiple mobile authorization headers in mobile traffic flows.

4.7.0

Added

• Support for JWT key names that contain dots (such as URLs) when extracting the user ID and additional fields

Version 4.6.1

• Send original vid from cookie on all activities under orig_cookie_vid
• Pass request object to response custom parameters custom function

Version 4.6.0

• Replaced crypto-es with Akamai’s built-in crypto module (Web Crypto API) to reduce bundle size
• Replaced whatwg-url with the lightweight UrlImpl regex-based parser from perimeterx-js-core
• Removed TextEncoder/TextDecoder polyfill (no longer needed)
• Bundle size reduced from ~493 KB to ~208 KB, resolving cold-start InitCpuTimeoutError

Version 4.5.0

• Support for px_enrich_response_custom_parameters custom function.

Version 4.4.2

• Adjusted PM static rule to exclude HEAD requests in addition to GET

Version 4.4.1

• Telemetry by risk - adjusted telemetry requested flag on risk_api response

Version 4.4.0

• Added is_sensitive_route field to risk api and async activities
• Added x-ew-socket-ip header to Risk API requests
• Telemetry activity update_reason field updated to reflect the reason for telemetry activity:
  • command - incoming telemetry request received
  • risk - telemetry triggered via risk response field
• Added request_id to telemetry activity details