Version 21.4.0
Fixed
- Fixed __ controllers allowlisting (prevents attackers using __Analytics for POST requests such as
/on/demandware.store/Sites-Hibbett-US-Site/default/__Analytics-Start%2F../GooglePay-PaymentAuthorized)
/on/demandware.store/Sites-Hibbett-US-Site/default/__Analytics-Start%2F../GooglePay-PaymentAuthorized)