Appearance

consentpro-dictionary ​

0.1.6 ​

Patch Changes ​

  • fecdc78: Fix the custom-site opt-in banner rendering without its reject button.

    The button set only ever reached the runtime through the CDN copy fetch, so any failed fetch left <consentpro-banner> on its own defaults, which show preferences and accept but default showDenyButton to false. An opt-in banner rendered accept-only, silently, which is a consent-compliance failure rather than a cosmetic one. One way to trigger it: instanceConfig writes the consentpro-mode query param into bannerType, but that param can carry an instance key rather than a banner type (the debugger's keys are region-derived), and the copy request for us-or 400s.

    consentpro-dictionary

    • BANNER_STRUCTURE and its BannerStructure type move to their own module and are exported from consentpro-dictionary/consent-copy. The record is unchanged; it was already locale-independent, so nothing about the served copy changes.
    • New getBannerStructure(method) resolves an unvalidated banner type, falling back to the opt-in structure — the only one that always offers a deny button — rather than returning undefined.

    consentpro-v2

    • The custom-site banner resolves its button structure locally from bannerType and layers the fetched copy's strings on top, so the button set no longer depends on the network. showGpcNotice is now derived from the same local structure gated on the visitor's GPC signal, instead of from the fetched copy.
    • instanceConfig's handling of consentpro-mode is left alone deliberately: it is shared with Webflow sites, and the local structure fallback already keeps the banner compliant for the unvalidated types it produces.
    • A failed copy fetch warns to the console instead of being swallowed, so a banner falling back to English defaults is diagnosable.

  • 8384efa: Show a placeholder overlay on iframes blocked for want of consent on custom (non-Webflow) sites.

    Custom sites have no pasted fs-consent-element="placeholder" markup, so a blocked embed simply lost its src and rendered as a blank box. The overlay now ships as a web component that core/v2 swaps into the blocked iframe itself.

    web-components

    • New <consentpro-placeholder> custom element, built as its own placeholder.js CDN bundle. Like every other component in this package, its props are plain JS properties observed as no attribute, and its buttons dispatch bubbling, composed consentpro:open-preferences / consentpro:allow events.

    consentpro-dictionary

    • getConsentCopy returns a placeholder block (message, preferencesText, acceptAllText), so the overlay is localized like every other component.

    server

    • GET /v2/cdn/web-components/placeholder.js serves the new bundle, and copy.json carries the placeholder strings.

    consentpro-v2

    • new/custom-site/placeholder.ts builds the blocked iframe's document as a string, which the existing blob path swaps into the iframe's src. It is self-contained: the CDN module that registers the element, plus the script that waits for that registration, creates the element and assigns the copy as JS properties. No markup is parsed, mutated or serialized on the way, and the copy is escaped into the script rather than interpolated into HTML.
    • That script tag is pinned with the build-time sha384 hash, so placeholder.js is now SRI-checked like the other component bundles.
    • Blocked iframes wire the overlay's events through custom-site/events.ts: the document is a same-origin blob:, so the component's consentpro:* events reach the consent-state layer directly.
    • A blocked iframe's own sandbox is stashed and dropped while the placeholder is shown, then restored verbatim before the original URL loads again. It applies to the untrusted embed, not to our placeholder, and without allow-scripts it kept the overlay from ever rendering.
    • iframe-blocked now fires once per blocked iframe, carrying the embed's URL. Re-rendering a placeholder whose copy arrived late no longer emits a second event whose src had already been replaced.

  • d3e426d: Link the custom-site banner to the project's own privacy policy, or show no link at all.

    The custom-platform banner always rendered a dead <a href="#">Privacy Policy</a>: the project's privacy-policy URL never reached the runtime.

    consentpro-dictionary

    • getConsentCopy returns messageHtmlWithoutPrivacyLink alongside messageHtml — the same message with the whole privacy sentence removed, cut from the tokenized template so every locale ends on its own sentence terminator. messageHtml is unchanged.

    server / consentpro-types

    • privacy_page_url maps to legal.privacyPolicyUrl, and sanitizeConfigForClient publishes that one field. cookiePolicyUrl and contactEmail stay server-side.

    consentpro-v2

    • The custom-site banner points the anchor at the configured URL (normalized through new URL() and restricted to http(s), opened in a new tab), and drops the privacy sentence when no URL is configured.

  • Updated dependencies [fecdc78]

  • Updated dependencies [9a490af]

  • Updated dependencies [d3e426d]

  • Updated dependencies [a580774]

  • Updated dependencies [d7331e4]

  • Updated dependencies [2ebb655]

    • consentpro-types@1.3.0
    • consentpro-utils@2.1.1

0.1.5 ​

Patch Changes ​

  • Updated dependencies [6757be6]
    • consentpro-types@1.2.1
    • consentpro-utils@2.1.0

0.1.4 ​

Patch Changes ​

  • f528b4f: Collapse Heap _hp2_* / _hp5_* environment-suffixed keys and Optimizely per-visitor optimizely_data$$oeu… / origin _oeu… stores into wildcard trackers, and add matching known-cookie entries so those keys are dictionary-matched on scan.
    • consentpro-utils@2.1.0

0.1.3 ​

Patch Changes ​

  • Updated dependencies [55656ae]
  • Updated dependencies [4afc228]
    • consentpro-utils@2.1.0
    • consentpro-types@1.2.0

0.1.2 ​

Patch Changes ​

  • 4d7fcb3: feat: add StackAdapt to known providers; add StackAdapt tracking pattern to tracker collapse patterns
    • consentpro-utils@2.0.3

0.1.1 ​

Patch Changes ​

  • Updated dependencies [3ea0afe]
    • consentpro-types@1.1.5
    • consentpro-utils@2.0.3

0.1.0 ​

Minor Changes ​

  • a0173e0: Add Disqus to the provider and cookie dictionaries so its comment-embed cookies and local-storage keys (disqus_unique, __jid, drafts.queue, submitted_posts_cache, disqus.thread, aet-dismiss) are recognized, named, and categorized instead of surfacing as auto-detected/unknown.

Patch Changes ​

  • 3fb6710: UX improvements: regions, banners, and action items.

  • 9d4c732: typeform url update

  • Updated dependencies [81c0689]

  • Updated dependencies [3fb6710]

  • Updated dependencies [81c0689]

    • consentpro-utils@2.0.3
    • consentpro-types@1.1.4

0.0.11 ​

Patch Changes ​

  • Updated dependencies [cb1d15a]
  • Updated dependencies [2487ddd]
    • consentpro-utils@2.0.2
    • consentpro-types@1.1.3

0.0.10 ​

Patch Changes ​

  • 494b74c: feat: add ClickUp provider to known providers; add SPLITIO collapse patterns tests for ClickUp trackers
  • 73a3472: improve attribution of resources to storage
  • 5407450: fix cookie declaration hydration
  • Updated dependencies [5407450]
  • Updated dependencies [e46032c]
    • consentpro-types@1.1.2
    • consentpro-utils@2.0.1

0.0.9 ​

Patch Changes ​

  • e5d2aad: fix: Whitelist numeric storage keys to stop Shopyflow product caches from being flagged as trackers
    • consentpro-utils@2.0.1

0.0.8 ​

Patch Changes ​

  • 353af98: feat: Implement tracker collapse functionality for improved analytics
    • consentpro-utils@2.0.1

0.0.7 ​

Patch Changes ​

  • ded7f80: update namings in usages of consent-pro-** to consentpro-**
  • 73aa49f: feat: consent pro debugger
    • consentpro-utils@2.0.1

0.0.6 ​

Patch Changes ​

  • Updated dependencies [ef22755]
  • Updated dependencies [9cf51bd]
    • consentpro-utils@2.0.1

0.0.5 ​

Patch Changes ​

  • 1a79dde: whitelist _cfuvid tracker and add language to ConsentProV2InstanceSettings
  • Updated dependencies [1a79dde]
    • consentpro-types@1.1.1
    • consentpro-utils@2.0.0

0.0.4 ​

Patch Changes ​

  • 1a79dde: whitelist _cfuvid tracker
    • consentpro-utils@2.0.0

0.0.3 ​

Patch Changes ​

  • Updated dependencies [6509630]
    • consentpro-types@1.1.0
    • consentpro-utils@2.0.0

0.0.2 ​

Patch Changes ​

  • Updated dependencies [e9bd587]
  • Updated dependencies [6029a6c]
  • Updated dependencies [2b400f7]
  • Updated dependencies [5b5fdd7]
    • consentpro-types@1.0.0
    • consentpro-utils@2.0.0