Enforcer frameworksAkamai EdgeWorker Enforcer

Akamai EdgeWorker changelog

October 16, 2025

Version 4.4.0

  • Added is_sensitive_route field to risk api and async activities
  • Added x-ew-socket-ip header to Risk API requests
  • Telemetry activity update_reason field updated to reflect the reason for telemetry activity:
    • command - incoming telemetry request received
    • risk - telemetry triggered via risk response field
  • Added request_id to telemetry activity details
August 25, 2025

Version 4.3.0

  • Support for adding a data enrichment header (new px_data_enrichment_header_name configuration)
  • Added Documentation enforcement workflow - verify that the documentation is up to date with the latest changes in the codebase
July 29, 2025

Version 4.2.0

  • Added the domain to the enforcer block page src to ensure the block page is served correctly from NetStorage
May 8, 2025

Version 4.1.1

  • Added argparse as dependency rather than dev dependency to allow the provided CLI tool to work properly
May 5, 2025

Version 4.1.0

  • Added URL decode reserved characters feature support (PX_DEC_URL_RESERVED_CHARS configuration)
  • Added Secure PXHD cookie support (PX_SECURED_PXHD_ENABLED configuration)
  • Added the WhatWG URL dependency to improve URL parsing
  • Changed Property Manager variables to remove unnecessary PMUSER_PX_EW_IP variable
  • Changed handler creation functions to always retrieve configuration from incoming request variables rather than saving the enforcer in closure
  • Changed onClientRequest to remove context and remote config headers from incoming request before processing
  • Fixed IP parsing issue by using AK_CLIENT_REAL_IP instead of AK_CLIENT_IP
  • Fixed issue that enabled users to add erroneous Risk API GET headers
April 16, 2025

Version 4.0.0

  • Refactor to use JS Core module, maintaining support for:
    • additional_activity_handler
    • advanced_blocking_response
    • block_activity
    • block_page_captcha
    • block_page_rate_limit
    • bypass_monitor_header
    • client_ip_extraction
    • cookie_v2
    • credentials_intelligence
    • css_ref
    • custom_cookie_header
    • custom_logo
    • cors_support
    • custom_parameters
    • enforced_routes
    • filter_by_extension
    • filter_by_http_method
    • filter_by_ip
    • filter_by_route
    • filter_by_user_agent
    • filter_by_custom_function
    • first_party
    • graphql_support
    • js_ref
    • logger
    • mobile_support
    • module_enable
    • module_mode
    • monitored_routes
    • page_requested_activity
    • pxde
    • pxhd
    • risk_api
    • sensitive_headers
    • sensitive_routes
    • vid_extraction
    • telemetry_command
    • user_identifiers
  • Released as a library for modular use
  • Added support for remote configuration using EdgeKV
  • Added support for header-based logger
  • Added support for regex flags in configuration
September 16, 2024

Version 3.5.3

  • Response provider enforcer (for Credential Intelligence, GraphQL) includes HTTP response status code on page_requested and block activities
September 5, 2024

Version 3.5.2

  • User request’s Authorization header no longer overriding the header that is being sent on risk api
  • Upgrading tests version