v0.4.5-beta
·
20 commits
to main
since this release
What's New
Cookie Consent Manager with Google Consent Mode v2
- Full consent banner with Accept All / Decline All / Customize options
- Settings panel via Dialog component with per-category toggles
- Google Consent Mode v2 integration (analytics, marketing, preferences)
- Supports both
consent_mode_v2andstrictblocking modes - Configurable via
consent.config.ts— categories, UI text, delay - Reopener button after consent is saved
PUBLIC_CONSENT_ENABLEDenv var to toggle on/off
Security
- Removed Astro CSP (auto-hashes
<style>blocks, breaking inline styles — revisit when stable) - Kept
checkOrigin: truefor CSRF protection - Simplified security headers via
vercel.json(clickjacking, MIME sniffing, referrer, permissions) - Dropped deprecated
X-XSS-Protectionheader
Fixes
- Fixed mobile menu backdrop blur not applying (scoped style → global)
- Fixed lint errors in Analytics and ConsentBanner
- Fixed dynamic consent mapping and race condition bugs