Changelog

Version 22.4.0

Added

• Send original VID from cookie on the risk API request under orig_cookie_vid
• Telemetry activity includes redacted sensitive configuration fields
• Telemetry activity includes custom function hash field
• Aligned Enforcer telemetry enforcer_configs with the telemetry spec by splitting it into active_config, static_config, and remote_config
• Added s2s_call_reason and risk_mode fields to the async activities

Version 22.3.0

• Added support for cookie v2
• Send original vid from cookie on all activities under orig_cookie_vid

Version 22.2.0

Added

• Added support for filter requests by http method
• Added support for enforcing SCAPI requests via the int_perimeterx_SCAPI cartridge

Changed

• Aligned cookie v2 validation flow with js-core: structure check, then HMAC validation, then expiry, then block/pass decision
• Split cookie v2 decrypt and validation stages to report cookie_decryption_failed vs cookie_validation_failed correctly on the Risk API

Version 22.1.1

Changed

• Changed handleHeaders implementation to support specific customer’s headers structure

Version 22.1.0

Added

• Added support for is sensitive request custom function
• Added is_sensitive_route field to risk API and async activities
• Reporting the cross tab session cookie for AD on async activities and risk API
• Added the additional_risk_info field to async activities if present on the risk API response
• Added custom functions support for Site Gensis and SFRA if onRequest is not wanted.

Version 22.0.1

Fixed

• Added missing px_cookie on async activities

Version 22.0.0

Internal

• Added E2E tests GitHub action

Added

• Added Enforcer start time to Risk API activity and async activities
• Added domain attribute to the pxhd cookie.
• Added user and pass fields to async activities

Changed

• Moved custom configuration files to dedicated pxCustomFunctionsConfig.js file
• Aligned the following field names to spec:
  • http_status to http_status_code
  • ip to socket_ip
  • uuid to client_uuid
• Improved telemetry error handling and stop the flow correctly after successful telemetry request processing
• Added support for configuring the backend URL and collector URL through the configuration
• Updated additionalActivityHandler custom function to return void instead of a boolean
• Updated pxSensitiveRoutes, pxMonitoredRoutes, pxEnforcedRoutes, and pxFilteredRoutes to accept a single regular expression pattern instead of an array of strings.
• Changed the async activities default url to https://collector-<px_app_id>.perimeterx.net

Removed

• Removed deprecated sensitiveRoutesRegex, enforcedRoutesRegex, monitoredRouteRegex, and filteredRoutesRegex configuration fields

Version 21.4.3

Fixed

• Removed service package to support SiteGenesis compatibility

Version 21.4.2

Added

• Support for filter routes by regex.

Fixed

• Better config handling.

Version 21.4.1

Changed

• Updated deprecated methods used in PXRequestValidator and pxCrypto.