Changelog

Version 2.3.2

Changed

• Removed dependency on Active Support
• Replaced eval() calls with JSON.parse() for improved security
• Small spec alignment changes (risk_api and block activities)

Version 2.3.1

Fixed

• URLs with query params did not render properly on new block page

Version 2.3.0

Added

• Custom logo in block JSON response

Changed

• Updated block page to use new template

Version 2.2.1

Fixed

• bypass_monitor_header type validation

Version 2.2.0

Added

• First Party

Version 2.1.0

Added

• Added option to set a different PX configuration on each request
• Added types validation on configuration fields

Fixed

• New cookie logic for mobile requests
• Renamed api_connect_timeout to api_timeout_conncection on default configuration
• Removed unsupported configuration fields:
  • max_buffer_len
  • local_proxy
• Send cookie_origin only if there is a cookie

Version 2.0.0

Added

• Added fields to Block Activity:
  • simulated_block
  • http_version
  • http_method
  • risk_rtt
  • px_orig_cookie
• Added fields to page_requested activity:
  • pass_reason
  • risk_rtt
  • px_orig_cookie
• Added px_orig_cookie field to risk_api in case of cookie_decryption_failed
• Added support for captcha v2
• Added support for Advanced Blocking Response
• Added support for whitelise routes
• Added support for bypass monitor header
• Added support for extracting vid from _pxvid cookie
• Added support for rate limit
• Added risk_cookie_max_iterations configuration

Fixed

• Updated dependencies
• Updated sample site dockerfile
• Fixed monitor mode
• Fixed send_page_activities and send_block_activities configurations
• Updated risk to v3
• Refactored ip header extraction
• Renamed block_uuid field to client_uuid
• Renamed perimeterx_server_host configuration to backend_url
• Updated risk_response handling: pass the request if risk_response.status is -1
• Forcing HTTP header values to be UTF-8

Version 1.4.0

Fixed

• Incorrect assignment for s2s_call_reason
• Fixed empty token result correct s2s reason

Added

• Added support to captcha API v2
• Mobile SDK support for special tokens 1/2/3

Version 1.3.0

Added

• Sending client_uuid on page_requested activities
• Supporting mobile sdk

Fixed

• Using request.env instead of env

Version 1.2.0

Fixed

• Default timeouts for post API requests
• Fixed Dockerfile

Changed

• Removed httpclient and instead using typhoeus

Added

• Using concurrent-ruby for async post requests

Version 1.1.0

Added

• Added support for sensitive routes