{"version":"2.1.277","anchor":"sessioncheckout-id-format-tightened-to-a-strict-uuid-regex","canonical_anchor":"sessioncheckout-id-format-tightened-to-a-strict-uuid-regex","heading":"Session\/checkout ID format tightened to a strict UUID regex","tier":"internal","area":"Attestation","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.277\/e\/sessioncheckout-id-format-tightened-to-a-strict-uuid-regex","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.277","markdown":"### Session\/checkout ID format tightened to a strict UUID regex\n\nDevice attestation status now validates session\/checkout IDs as strict UUIDs\n\n**What**\n\nA constant used in device attestation status checks, which previously matched an ID by string prefix, is replaced with a strict regular expression that only matches a properly formatted UUID (a standard 36-character identifier format).\n\n**Why**\n\nThis makes the check stricter: an ID has to be a well-formed UUID to pass, rather than merely starting with the right prefix, which should reduce the chance of a malformed or spoofed ID being accepted.\n\n- Area: Attestation\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 1\/5"}