Skip to main content

Web SDK v2.344.0

Added​

  • Support for future feature matching on subdomain hashes instead of requiring glob patterns for staging servers

Changed​

  • Updated the backdrop behavior to use aria-hidden by default and only apply the inert attribute when the useInertForBackdrop configuration is enabled
  • preferBroadcastChannel and preventUnloadListener now default to true when no agent config is provided

Fixed​

  • Fix web SDK initialization and event collection in older Internet Explorer document modes
  • Resolved an issue where certain WebSocket browser extensions could cause the application to hang by disabling live replay when non-native WebSocket methods are detected
  • Prevented the mobile keyboard from closing unexpectedly when tapping into guide text fields in Cordova applications

Security​

  • Check the origin of frames joining the cross-frame channel when enforceAllowedOriginServers is enabled
  • Reject cross-frame connect messages from windows outside the page's own frame tree
  • Only read legacy window.pendo_options configuration when it is a plain object
  • Only load the staging/debug agent from a script tag served by the Pendo CDN
  • Anchor regular-expression entries in the allowed origin server list so a look-alike origin is no longer trusted
  • Properly escape all allowed origins used in regex