v1.7.11
- Security (low): the recommendation analytics endpoint, open to any visitor, now stores only the placements the storefront renders and only real products, so crafted requests can no longer fill the stats table with invented rows.
- Impressions and clicks sent as the visitor leaves the page are recorded again. They go out with navigator.sendBeacon, which carries the security token in the address, and the endpoint only looked in the header.