v7.3.7

[7.3.7] - 2026-10-19

Fixed

• URI suffix whitelist matching now ignores matrix parameters on the last path segment

v7.3.6

[7.3.6] - 2025-09-30

Added

• support for additional_risk_info feature
• is_sensitive_route field to risk api and async activities

v7.3.5

[7.3.5] - 2025-06-30

Added

• Whitelist by request host name

v7.3.4

[7.3.4] - 2024-12-26

Changed

• Automatically inspect GraphQL POST data

Fixed

• GraphQL default path

v7.3.3

[7.3.3] - 2024-07-19

Fixed

• Fix rate_limit code for JSON responses

v7.3.2

[7.3.2] - 2024-07-17

Fixed

• Fix rate_limit code

v7.3.1

[7.3.1] - 2024-07-17

Changed

• Remove lua-resty-nettle version restriction

Fixed

• Install PX package symlink in OpenResty Lua directory

v7.3.0

[7.3.0] - 2023-06-13

Added

• CORS support
• Set X-PX-COOKIES as the default custom cookie name
• _M.px_login_creds_settings configuration, to allow specify CI settings in Lua configuration file

Changed

• rename "px_graphql_paths" to "px_graphql_routes"

Fixed

• correctly add GraphQL routes (requests must contain specified GraphQL Type/Name) to sensitive routes

v7.2.1

[7.2.1] - 2023-04-20

Added

• custom_sensitive_routes a custom function to determine if url path is a sensitive route

v7.2.0

[7.2.0] - 2023-04-13

Added

• custom_enabled_routes a custom function to determine if url path is an enabled route
• px_graphql_paths to specify a list of GraphQL endpoints
• support for JWT and pxcts

Changed

• support for multiple GraphQL endpoints

Fixed

• Add CI paths to the sensitive routes