Changelog

Version 7.3.6

Added

• Support for additional_risk_info feature
• is_sensitive_route field to Risk API and async activities

Version 7.3.5

Added

• Whitelist by request host name

Version 7.3.4

Changed

• Automatically inspect GraphQL POST data

Fixed

• GraphQL default path

Version 7.3.3

Fixed

• Rate limit code for JSON responses

Version 7.3.2

Fixed

• Rate limit code

Version 7.3.1

Changed

• Remove lua-resty-nettle version restriction

Fixed

• Install PX package symlink in OpenResty Lua directory

Version 7.3.0

Added

• CORS support
• Set X-PX-COOKIES as the default custom cookie name
• _M.px_login_creds_settings configuration, to allow specify CI settings in Lua configuration file

Changed

• Rename px_graphql_paths to px_graphql_routes

Fixed

• Correctly add GraphQL routes (requests must contain specified GraphQL Type/Name) to sensitive routes

Version 7.2.1

Added

• custom_sensitive_routes a custom function to determine if URL path is a sensitive route

Version 7.2.0

Added

• custom_enabled_routes a custom function to determine if url path is an enabled route
• px_graphql_paths to specify a list of GraphQL endpoints
• Support for JWT and pxcts

Changed

• Support for multiple GraphQL endpoints

Fixed

• Add CI paths to the sensitive routes

Version 7.1.3

Fixed

• Export ngx.ctx.pxde variable

Version 7.1.2

Fixed

• Properly handle multiple instances of the same header
• Field name in telemetry command