Skip to content
Changelog Hub

posthog-js 1.391.7

npm / posthog-js / 1.391.7 source ↗

1.391.7

Patch Changes

  • #3914 dac4edb Thanks @pauldambra! - Session replay network capture: redact credential-bearing headers on both request and response (previously only request), and match credential-shaped custom header names by substring (e.g. x-gist-encoded-user-token) in addition to the exact deny list - avoiding accidental capture of tokens/cookies in recordings. (2026-06-22)