> This page is for Applications Protection.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.humansecurity.com/llms.txt.

# HAProxy changelog

## August 11, 2026

## 0.16.2

### Added

* `px_block_page_title` configuration to specify block page title
* When Remote Configuration isenabled, read extra configuration file
* Health check service for GCP Callout Enforcer

### Fixed

* Updated various build scripts, added support for new Linux distros
* Several minor issues in the code

## April 16, 2026

## 0.16.1

### Added

* `px_redirect_on_custom_url_raw_query` configuration to specify whether to urlencode the original request URL query when redirecting to a custom block page
* Support for 2.5.0 Nginx Gateway Fabric

### Changed

* Modernize Callout Enforcer build files

## March 20, 2026

## 0.16.0

### Changed

* Migrate to PCRE2 for regex handling

## March 10, 2026

## Version 0.15.14

### Added

* `px_abr_accept_header_regex` configuration to specify a regex for Accept header values that should be treated as ABR requests

## February 23, 2026

## Version 0.15.13

### Added

* New field `path_type` to CI configuration file to specify if a path field is a regex or a plain string

## January 11, 2026

## Version 0.15.12

### Fixed

* Optimize request handling for FP endpoints to improve performance and error resilience

## September 30, 2025

## Version 0.15.11

### Added

* `px_send_additional_s2s_on_sensitive_routes` configuration
* Support for `additional_risk_info` in RiskAPI response
* `is_sensitive_route` field to RiskAPI and async activities
* Merged GCP Callout Enforcer code and test files into the main repository

### Changed

* Always read `pxcts` cookie
* Improve Envoy Enforcer build and test files

## June 18, 2025

## Version 0.15.10

### Fixed

* Minor bug fixes

## December 26, 2024

## Version 0.15.9

### Added

* New testing system
* Automated Fuzzing Test

## July 25, 2024

## Version 0.15.8

### Fixed

* Minor stability fixes

## July 11, 2024

## Version 0.15.7

### Fixed

* Enforcer memory usage improvements

## July 3, 2024

## Version 0.15.6

### Added

* Rate Limit feature

## May 30, 2024

## Version 0.15.5

### Fixed

* Minor stability fixes

## May 13, 2024

## Version 0.15.4

### Fixed

* Fixed several minor issues reported by fuzz testing

## February 27, 2024

## Version 0.15.3

### Fixed

* Minor stability fixes

## January 31, 2024

## Version 0.15.1

### Added

* Add `raw_url` field for all activities, which contains unparsed URL
* Add BlockedURL parameter to Captcha

### Fixed

* Do not send a body response for HEAD requests
* Fix `compression_level` feature (users can now set a compressing level 1-9 for Async Activities)

### Changed

* Update Captcha template

## October 27, 2023

## Version 0.15.0

### Added

* Add `px_url_decode_reserved_characters` to decode reserved URL characters

### Fixed

* Correctly set Enforcer endpoints for a custom FirstParty prefix.

## October 11, 2023

## Version 0.14.11

### Added

* Add support for v1.9.0 "ingress-nginx"
* Add new configuration `px_skip_module` to use it with Nginx variables to conditionally enable/disable Enforcer.
* Add an option to postpone network initialization (needed by chroot)

### Fixed

* Fix `px_filter_by_domain` regex initialization issue
* Improvements related to HAProxy module

## September 20, 2023

## Version 0.14.10

### Fixed

* Issue with handling first party requests

## September 1, 2023

## Version 0.14.9

### Added

* Header‐Based Logger

### Fixed

* Correctly handle POST requests
* Improvements related to processing request data

_Showing the 20 most recent of 66 entries. Append `/llms.txt` to the changelog URL for the complete index._