bugfixed

Author: chen-zimmer-px

CHANGELOG.md

@@ -5,7 +5,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/)
 and this project adheres to [Semantic Versioning](http://semver.org/).
 
-## [3.10.0] - 2023-03-28
+
+## [3.10.1] - 2023-03-29
+
+### Fixed
+- Bug fixed in pxCookieValidator which fails on invalid variable name.
+
+## [3.10.0] - 2023-03-28 (removed)
 
 ### Added
 - Support for handling graphQL requests with empty query field

README.md

@@ -6,7 +6,7 @@
 [PerimeterX](http://www.perimeterx.com) Shared base for NodeJS enforcers
 =============================================================
 
-> Latest stable version: [v3.10.0](https://www.npmjs.com/package/perimeterx-node-core)
+> Latest stable version: [v3.10.1](https://www.npmjs.com/package/perimeterx-node-core)
 
 This is a shared base implementation for PerimeterX Express enforcer and future NodeJS enforcers. For a fully functioning implementation example, see the [Node-Express enforcer](https://github.com/PerimeterX/perimeterx-node-express/) implementation.
 

lib/pxcookie.js

@@ -81,7 +81,7 @@ function evalCookie(ctx, config) {
             return ScoreEvaluateAction.COOKIE_INVALID;
         }
 
-        if (ctx.sensitiveRoute()) {
+        if (ctx.sensitiveRequest()) {
             config.logger.debug(`Sensitive route match, sending Risk API. path: ${ctx.uri}`);
             ctx.s2sCallReason = 'sensitive_route';
             return ScoreEvaluateAction.SENSITIVE_ROUTE;

lib/pxtesthandler.js

@@ -17,7 +17,7 @@ function customRequestHandler(ctx, config, req, res) {
         headers: ctx.headers,
         user_agent: ctx.userAgent,
         is_made_s2s_api_call: ctx.hasMadeServerCall || false,
-        sensitive_route: ctx.sensitiveRoute,
+        sensitive_route: ctx.sensitiveRequest(),
         sensitive_routes_list: config.SENSITIVE_ROUTES,
         whitelist_routes: config.WHITELIST_ROUTES,
         decoded_px_cookie: ctx.decodedCookie,

package-lock.json

@@ -1,6 +1,6 @@
 {
     "name": "perimeterx-node-core",
-    "version": "3.10.0",
+    "version": "3.10.1",
     "description": "PerimeterX NodeJS shared core for various applications to monitor and block traffic according to PerimeterX risk score",
     "main": "index.js",
     "scripts": {