> This page is for Applications Protection.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.humansecurity.com/llms.txt.

# Changelog

## September 28, 2025

## Version 1.10.1

### Fixed

* Fixed exception swallowing issue that prevented proper error handling in downstream middleware and controllers
* Downgraded `Microsoft.Extensions.*` package versions from 9.0.1 to 6.0.0 to support .NET 6.0 target framework

## August 20, 2025

## Version 1.10.0

### Added

* Account Defender (User Identifiers), including support for:
  * Reporting of the cross tab session cookie
  * Extracting user ID and additional fields from cookie- or header-based JWT
* Added Documentation enforcement workflow - verify that the documentation is up to date with the latest changes in the codebase

## August 13, 2025

## Version 1.9.0

### Added

* Added support for dependency injection in custom function filter
* Added support for additional fields on px3 cookies

## July 29, 2025

## Version 1.8.0

### Added

* Added support for filter request by custom function feature

## June 17, 2025

## Version 1.7.0

### Added

* Added Cross Tab Session cookie support on `risk_api` and async activities

## April 2, 2025

## Version 1.6.1

### Added

* Added support for `inc_id` and `f_access_token` data enrichment fields
* Added `c`, `add` and `i` fields to the decrypted cookie structure

## January 30, 2025

## Version 1.6.0

### Added

* Added support for passing logger factory using DI
* Using `IHttpClientFactory` to manage HTTP client lifetimes
* Added First Party origin response headers to the first party client response
* Added support for all HTTP methods for First Party requests

### Changed

* Replaced `Nustache` nuget package with `Stubble` which used for template rendering
* Replaced blocking `Wait` function with non blocking await

## January 16, 2025

## Version 1.5.1

### Fixed

* Fixed first party XHR headers to send the content type of the source request
* Fixed the `ipc_id` field type in data enrichment from string to number
* Added default values `NONE` to `BotDefenderPassReason` and `BotDefenderS2SCallReason` for accuracy

## September 26, 2024

## Version 1.5.0

### Changed

* Modify telemetry activity to include all types of config
* Telemetry activity includes redacted sensitive configuration fields

## July 25, 2024

## Version 1.4.0

### Added

* Logging exception message at top level for improved debugging
* Added support for custom ip extraction feature

### Fixed

* Converting IP headers value to Lower case
* Add exception handling for an invalid ip input in filter by ip logic

## March 12, 2024

## Version 1.3.0

### Fixed

* Extract the hostname from the headers instead of the request object

### Added

* Configuration for first party timeout
* Configuration for user agent max length
* Added `pxhd` and `pxOrigCookie` fields to async activities
* Added base64-encoded URL and http method to captcha script query parameters on block pages
* Added module version field to header-based logger logs

### Changed

* Bot Defender captcha page includes client-side first party timeout

## January 22, 2024

## Version 1.2.1

### Fixed

* Creating the HUMAN logger factory per middleware rather than per request context.

## December 26, 2023

## Version 1.2.0

### Added

* Added support for header-based logger feature
* Added logger per request context
* Added `risk_start_time` and `enforcer_start_time` fields to Enforcer activities

### Fixed

* Fixed custom endpoints for first party
* Fixed first party XHR requests URL
* Fixed issue with proxied XHR requests URL validation

## November 15, 2023

## Version 1.1.0

### Added

* Added support for custom cookie header feature

### Fixed

* Fixed `captcha.js` URL for third party

## October 30, 2023

## Version 1.0.6

### Added

* S2S error handling support
* Added additional logs

## October 25, 2023

## Version 1.0.5

### Fixed

* Changed cookie expire logic to UTC time
* Fixed bug in telemetry command

## October 22, 2023

## Version 1.0.4

### Changed

* Separate monitored routes, enforced routes, sensitive routes and filter by route for regex and exact paths dedicated configuration fields.

## October 18, 2023

## Version 1.0.3

### Added

* Automatic installation for all project dependencies using PackageReference.
* Added possible debug option - `none` (the logger will not output any logs)

## October 15, 2023

## Version 1.0.2

### Added

* Added new HUMAN Logger
* Added additional logs

### Fixed

* First party add headers bug

## October 11, 2023

## Version 1.0.1

### Added

* Added additional risk info to async activities

### Fixed

* Fixed first party and CAPTCHA asynchronous issue

_Showing the 20 most recent of 21 entries. Append `/llms.txt` to the changelog URL for the complete index._