All notable changes to this project will be documented in this file. The format is based on Keep a Changelog
- Support for custom cookie header
- first-party XHR url validation
- Added firstPartyEnabled field to advanced blocking response
- Fixed advanced blocking response feature
- Support for credentials intelligence protocols
v2
andmultistep_sso
- Support for login successful reporting methods
header
,status
,body
, andcustom
- Support for automatic sending of
additional_s2s
activity - Support for manual sending of
additional_s2s
activity via header - Support for sending raw username on
additional_s2s
activity - Support for login credentials extraction via custom function
- New
request_id
field to all enforcer activities
- Compatibility with .NET Framework 4.7 and higher
- Simulated block indication on block activities
- HTTP method on async activities
- customBlockUrl - url query param will now point to path instead of absolute url
- customBlockUrl redirect flow
- customBlockUrl whitelisting
- Send telemetry on demand by header
- Support for testing blocking flow in monitor mode
- CustomVerificationHandler handling
- Added PXHD handling
- Added cookie names extraction
- Added data enrichment cookie handling to context
- Added custom block page with redirects feature
- Support for simulated_block
- Captcha v2 template and error handling
- Various stablity and performance fixes
- Support for captcha v2
- Mobile token extraction in cookie validator
- Support for first party
- Support enforced specific routes
- Support for mobile sdk
- Support for original tokens
- Support funCaptcha in mobile
- Enforcer Telemetry
- Edit block page footer
- Edit reCaptcha template to use b64 captcha
- Enrichment for async activities
- Handling duplicate cookies
- Fixed default value for sensitive_route
- Using action_block to render block pages
- Naming for s2s expired_cookie reason to cookie_expired
- JS Challenge support
- FunCaptcha support
- CustomVerificationHandler support
- MonitorMode and set default to true Please note: MonitorMode is breaking backward support if you upgrade to this version or further and want to keep your blocking active, please set its value to False
- Renamed risk_score to block_score in activity details
- Fixed block score threshold
- Support for sensitive routes
- Log page requested reason
- Mesure risk rout trip time
- Collect right Hostname in context
- Renamed module_version
- Block/Page Requested Activities now sends module_verison and risk_socre
- Support Cookie v3
- Support RiskAPI v2
- Moved PxModule verification code, request state, api calls to managable files
- New classes, Validators, DataContracts (Cookies, Activities, Requests etc...)
- Refactor module to work with PxContext
- Reordered library into folders
- Support custom header for user-agent
- added .axd files to whitelist files
- sending px_orig_value when decryption fails
- Moved server url to new URL
- New design for block pages
- Block page customisation
- Support for classic pipeline mode