For AI agents: a documentation index is available at the root level at /llms.txt. Append /llms.txt to any URL for a page-level index, or .md for the markdown version of any page.
Version 22.4.0
Added
- Send original VID from cookie on the risk API request under
orig_cookie_vid
- Telemetry activity includes redacted sensitive configuration fields
- Telemetry activity includes custom function hash field
- Aligned Enforcer telemetry
enforcer_configs with the telemetry spec by splitting it into active_config, static_config, and remote_config
- Added
s2s_call_reason and risk_mode fields to the async activities
Version 22.3.0
- Added support for cookie v2
- Send original vid from cookie on all activities under
orig_cookie_vid
Version 22.2.0
Added
- Added support for filter requests by http method
- Added support for enforcing SCAPI requests via the
int_perimeterx_SCAPI cartridge
Changed
- Aligned cookie v2 validation flow with js-core: structure check, then HMAC validation, then expiry, then block/pass decision
- Split cookie v2 decrypt and validation stages to report
cookie_decryption_failed vs cookie_validation_failed correctly on the Risk API
Version 22.1.1
Changed
- Changed handleHeaders implementation to support specific customer’s headers structure
Version 22.1.0
Added
- Added support for is sensitive request custom function
- Added
is_sensitive_route field to risk API and async activities
- Reporting the cross tab session cookie for AD on async activities and risk API
- Added the additional_risk_info field to async activities if present on the risk API response
- Added custom functions support for Site Gensis and SFRA if onRequest is not wanted.
Version 22.0.1
Fixed
- Added missing
px_cookie on async activities
Version 22.0.0
Internal
- Added E2E tests GitHub action
Added
- Added Enforcer start time to Risk API activity and async activities
- Added domain attribute to the pxhd cookie.
- Added
user and pass fields to async activities
Changed
- Moved custom configuration files to dedicated
pxCustomFunctionsConfig.js file
- Aligned the following field names to spec:
http_status to http_status_codeip to socket_ipuuid to client_uuid
- Improved telemetry error handling and stop the flow correctly after successful telemetry request processing
- Added support for configuring the backend URL and collector URL through the configuration
- Updated
additionalActivityHandler custom function to return void instead of a boolean
- Updated
pxSensitiveRoutes, pxMonitoredRoutes, pxEnforcedRoutes, and pxFilteredRoutes to accept a single regular expression pattern instead of an array of strings.
- Changed the async activities default url to
https://collector-<px_app_id>.perimeterx.net
Removed
- Removed deprecated
sensitiveRoutesRegex, enforcedRoutesRegex, monitoredRouteRegex, and filteredRoutesRegex configuration fields
Version 21.4.3
Fixed
- Removed service package to support SiteGenesis compatibility
Version 21.4.2
Added
- Support for filter routes by regex.
Fixed
Version 21.4.1
Changed
- Updated deprecated methods used in
PXRequestValidator and pxCrypto.
