> This page is for Applications Protection.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.humansecurity.com/llms.txt.

# Changelog

## April 27, 2026

## Version 3.3.0

### Added

* Support for multiple appIDs

### Changed

* Refactor old "gen.sh" script, new generate-data-group.sh script generates data-group with given parameters, can be used for generating multiple data-groups for different appIDs
* Update the documentation

## February 8, 2026

## Version 3.2.1

### Fixed

* Added format validation for `_pxvid` cookie value before use in block page rendering

## December 29, 2025

## Version 3.2.0

### Added

* Full support for PXDE (Data Enrichment) feature
* Added reserved_headers list to filter Authorization, Content-Type, and Content-Length headers from Risk API requests

### Fixed

* Separation between `s2s_timeout` and `s2s_error` in pass reason reporting
* Malformed (including non-ASCII) cookies no longer cause errors in HSSR iRule and on backend response when sent on risk activities

## May 15, 2025

## Version 3.1.3

### Added

* Support for whitelisting based on URL query parameters

## September 13, 2024

## Version 3.1.2

### Fixed

* `risk_mode`/`simulated_block` are reported correctly when using `bypass_monitor_header`

## October 9, 2023

## Version 3.1.1

### Fixed

* Custom params sent on async activities

## July 10, 2023

## Version 3.1.0

### Added

* Generating request ID
* Support for Additional S2S for CI

### Fixed

* Raw username is additional S2S

## March 10, 2023

## Version 3.0.0

### Added

* Support for Account Defender
* Support for Login Credentials Extraction
* Support for Upstream Score Header
* Support for domain/path based monitor mode

### Fixed

* `is_json_response` logic

## April 6, 2021

## Version 2.4.0

### Added

* Support for JavaScript sensor injection

## May 7, 2020

## Version 2.3.0

### Added

* Support for custom parameters
* Support for PXHD cookie
* Support for first party requests

## March 16, 2020

## Version 2.2.0

### Added

* Support for Advanced Blocking Response
* Support for Custom Cookie Header

## March 4, 2019

## Version 2.1.0

### Added

* Added support for ip and CIDRs whitelist using `whitelist_ips`
* Added Support for testing blocking flow in monitor mode

## January 29, 2019

## Version 2.0.0

### Added

* Added support for CaptchaV2

## January 16, 2019

## Version 1.12.0

### Added

* Added support for a module enabling header

## November 15, 2017

## Version 1.10.6

### Fixed

* Sending all header values in right order to PerimeterX in risk, captcha and sync block

## November 13, 2017

## Version 1.10.5

### Fixed

* Revert how values are extracted by headers using values instead of last value
* Custom function to extract IP

## September 4, 2017

## Version 1.10.0

### Added

* Support for funCaptcha
* Better Captcha handling in block page

## August 28, 2017

## Version 1.9.1

### Fixed

* Fixed the priority for sensitive route to be the last on cookie processing
* Sending `px_cookie` on all risk APIs if exists

## August 24, 2017

## Version 1.9.0

### Added

* Support for mobile SDK

## August 7, 2017

## Version 1.8

### Added

* Async activities (`page_requested` & `block`)
* Multiple application
* Async Monitor mode
* Sending cookie HMAC
* Sending client_uuid on `page_requested`
* Sending risk_rtt on `page_requested`
* Added pass reason
* Extracting action from risk calls
* Dynamic block page rendering\`
* Support JavaScript challenge

### Improvements

* Debug logs with per application
* Responsive default block pages with new design

### Fixed

* Removing `_pxCaptcha` from browser
* Sync Monitor mode now sends risk API

_Showing the 20 most recent of 23 entries. Append `/llms.txt` to the changelog URL for the complete index._