For AI agents: a documentation index is available at the root level at /llms.txt. Append /llms.txt to any URL for a page-level index, or .md for the markdown version of any page.
Version 6.17.1
- Fix ClassCastException when adding headers to non-RequestWrapper request
Version 6.17.0
- Added Jakarta EE support via new
perimeterx-sdk-jakarta artifact (Spring Boot 3.x, Tomcat 10+). The existing perimeterx-sdk artifact continues to support Java EE / javax.servlet environments (Spring Boot 2.x, Tomcat 9 and earlier).
- Fixed first party captcha reverse proxy to use
startsWith instead of contains when matching the captcha prefix
- Fixed first party captcha reverse proxy to correctly return
true (handled) after rendering the default response when first party is disabled
- Send original vid from cookie on all activities under
orig_cookie_vid
Version 6.16.0
- Added support for data enrichment header feature (
px_data_enrichment_header_name configuration)
- Added support for AD user identifiers feature
- Added
px_secured_pxhd_enabled configuration option to enable secure flag on pxhd cookie
- Added
is_sensitive_route to risk api and async activities
- Added
additional_token_info to risk api and async activities
- Updated telemetry activity to new format (
static_config and active_config; remote_config is not supported)
- Updated telemetry activity to include
request_id
- Updated captcha page template to newest version
- Updated dependencies minor and patch versions (major versions unchanged)
- Changed custom parameters to be of type
Object instead of String to allow more flexibility
- Changed first party block script in captcha template to end with expected
/captcha.js
- Changed
RequestWrapper to include custom headers in methods that retrieve request headers
- Fixed possible connection leak issue due to unclosed responses in first party and telemetry requests
- Fixed first party fuzzing errors by returning 400 on first party requests with URL length > 1000 characters
Version 6.15.1
- Added additional
updateReason RISK to Telemetry flow
Version 6.15.0
- Added Telemetry by Risk support
Version 6.14.2
- Added Cross Tab Session cookie support on
risk_api and async activities
Version 6.14.1
- Fix Telemetry bug when sending page requested activities when telemetry fails
- Fix
risk_rtt is not sent when risk call gets s2s_timeout
Version 6.14.0
- Added cookie secret rotation support
Version 6.13.0
- Added vid validation for
_pxvid extraction
Version 6.12.0
- Fixed: sensitive headers are now case-insensitive.
