posthog-js@1.391.7
·
8 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
1.391.7
Patch Changes
- #3914
dac4edbThanks @pauldambra! - Session replay network capture: redact credential-bearing headers on both request and response (previously only request), and match credential-shaped custom header names by substring (e.g.x-gist-encoded-user-token) in addition to the exact deny list - avoiding accidental capture of tokens/cookies in recordings.
(2026-06-22)