real-cookie-banner
Change Log
All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.
5.4.3 2026-11-11
Bug Fixes
-
bump json-machine to 1.2.6 for PHP 8.4+ nullable parameter types internal reference #869fnmyzq
-
do not block content in Tatsu Builder page builder internal reference #869fpfvh7
-
escape the cookie policy headings to prevent stored XSS internal reference #869fmjevu
-
honour bots accept-all setting on prevent-predecision pages internal reference #869fnnkh4
-
honour dismissed new consent notices of other languages on translation plugin sites internal reference #869fmjevu
-
keep providerContact as arrays to avoid PHP 8.5 ArrayIterator deprecation internal reference #869fnmyzq
-
keep the new consent notice for cookie policy edits beyond the escaped headings internal reference #869fmjevu
-
refresh websiteOperator in banner context after secondView fetch internal reference #869em5f1b
-
show only http(s) referers as links in the consent list internal reference #869fmjevu
-
skip TranslatePress translateArray during banner option autoload internal reference #869fnp5kv
Documentation
-
add security notices for the fixes in Real Cookie Banner 5.4.3 internal reference #869fmjevu
Dependency updates @devowl-wp/cookie-consent-management 1.1.3
Purpose of dependency: Provide cookie consent management with adapters to your environment
Bug Fixes
- escape the cookie policy headings to prevent stored XSS internal reference #869fmjevu
- show only http(s) referers as links in the consent list internal reference #869fmjevu
Dependency updates @devowl-wp/cookie-consent-web-client 1.1.3
Purpose of dependency: Apply cookies consent (opt-in, opt-out) to the current webpage.
Bug Fixes
- honour bots accept-all setting on prevent-predecision pages internal reference #869fnnkh4
Dependency updates @devowl-wp/fast-html-tag 1.4.5
Purpose of dependency: Find tags within HTML content and modify it in speed of light
Bug Fixes
- prevent stored XSS via forged content blocker markers in comments internal reference #869fmjevu
Dependency updates @devowl-wp/headless-content-blocker 1.4.20
Purpose of dependency: Block HTML content by URLs and selector syntax
Bug Fixes
- prevent stored XSS via forged content blocker markers in comments internal reference #869fmjevu
Dependency updates @devowl-wp/multilingual 1.14.43
Purpose of dependency: Provide helper functionality for multilingual plugins like WPML and PolyLang
Bug Fixes
- avoid temp text domain before locked translation snapshot internal reference #869fnp5kv
- keep providerContact as arrays to avoid PHP 8.5 ArrayIterator deprecation internal reference #869fnmyzq
- keep TranslatePress default MO snapshot across translateArray internal reference #869fnp5kv
- resolve TranslatePress URL slugs in getTranslatedName internal reference #869fnp5nc
Dependency updates @devowl-wp/service-cloud-consumer 1.0.60
Purpose of dependency: Consume service and blocker templates from service cloud
Bug Fixes
- keep providerContact as arrays to avoid PHP 8.5 ArrayIterator deprecation internal reference #869fnmyzq
Development dependency update @devowl-wp/web-scoped-css 1.0.29
Purpose of dependency: Define a scoped stylesheet in JavaScript with performance in mind.
Bug Fixes
- dedupe createStylesheet nodes pending fastdom append internal reference #869fnnarw
5.4.0 2026-10-14
Bug Fixes
-
complete service scanner jobs for non-HTML sitemap URLs like KML internal reference #869fgg2kf
-
escape TCF vendor data in the cookie banner and cookie policy internal reference #869f82uke
-
exclude activeLanguages from content-hashed localize assets internal reference #869em5f1b
-
use Weblate nb language code instead of nb_NO after 2026.10 internal reference #31976hv
Documentation
-
add conception for TCF 2.4 support in Real Cookie Banner internal reference #869f82uke
-
update the TCF 2.4 conception after the implementation internal reference #869f82uke
Features
-
support IAB TCF 2.4 with the feature standard text and labels for cookies without TCF purpose internal reference #869f82uke
Dependency updates @devowl-wp/api-real-cookie-banner 1.5.7
Purpose of dependency: Shared typings for all Real Cookie Banner backend.
Bug Fixes
- keep TCF device disclosures with cookies without TCF purpose and special purposes internal reference #869f82uke
Dependency updates @devowl-wp/cookie-consent-management 1.1.0
Purpose of dependency: Provide cookie consent management with adapters to your environment
Bug Fixes
-
escape TCF vendor data in the cookie banner and cookie policy internal reference #869f82uke
Features
- support IAB TCF 2.4 with the feature standard text and labels for cookies without TCF purpose internal reference #869f82uke
Dependency updates @devowl-wp/cookie-consent-web-client 1.1.0
Purpose of dependency: Apply cookies consent (opt-in, opt-out) to the current webpage.
Features
- support IAB TCF 2.4 with the feature standard text and labels for cookies without TCF purpose internal reference #869f82uke
Dependency updates @devowl-wp/customize 1.13.39
Purpose of dependency: Abstract utility for live preview (customize)
Bug Fixes
- use Weblate nb language code instead of nb_NO after 2026.10 internal reference #31976hv
Dependency updates @devowl-wp/headless-content-unblocker 1.3.13
Purpose of dependency: Unblock mechanism for @devowl-wp/headless-content-blocker with visual capabilities.
Bug Fixes
- restore Vimeo fullscreen after consent by dropping iframe location.replace internal reference #869fey8e3
Dependency updates @devowl-wp/multilingual 1.14.40
Purpose of dependency: Provide helper functionality for multilingual plugins like WPML and PolyLang
Bug Fixes
- use Weblate nb language code instead of nb_NO after 2026.10 internal reference #31976hv
Dependency updates @devowl-wp/react-cookie-banner 1.2.0
Purpose of dependency: Provide UI for a cookie banner and content blocker for multiple services.
Bug Fixes
-
escape TCF vendor data in the cookie banner and cookie policy internal reference #869f82uke
Features
- support IAB TCF 2.4 with the feature standard text and labels for cookies without TCF purpose internal reference #869f82uke
Dependency updates @devowl-wp/react-cookie-banner-admin 1.2.0
Purpose of dependency: Provide admin UI for a cookie banner and content blocker for multiple services.
Features
- support IAB TCF 2.4 with the feature standard text and labels for cookies without TCF purpose internal reference #869f82uke
Dependency updates @devowl-wp/real-product-manager-wp-client 1.22.6
Purpose of dependency: A WordPress client for Real Product Manager
Bug Fixes
- use Weblate nb language code instead of nb_NO after 2026.10 internal reference #31976hv
Dependency updates @devowl-wp/real-queue 1.1.39
Purpose of dependency: Provide a promise-based queue system working in frontend for client and server tasks
Bug Fixes
- use Weblate nb language code instead of nb_NO after 2026.10 internal reference #31976hv
Dependency updates @devowl-wp/real-utils 1.14.40
Purpose of dependency: Create about page, rating and newsletter input for WP Real plugins.
Bug Fixes
- use Weblate nb language code instead of nb_NO after 2026.10 internal reference #31976hv
Dependency updates @devowl-wp/utils 1.20.39
Purpose of dependency: Utility functionality for all your WordPress plugins.
Bug Fixes
- use Weblate nb language code instead of nb_NO after 2026.10 internal reference #31976hv
5.3.10 2026-10-08
Bug Fixes
-
keep page-specific localize data out of content-hashed assets internal reference #869em5f1b
Dependency updates @devowl-wp/deliver-anonymous-asset 1.0.63
Purpose of dependency: Provide a functionality to deliver assets anonymous
Bug Fixes
- keep page-specific localize data out of content-hashed assets internal reference #869em5f1b
- prefix anonymous localize bucket key on window internal reference #869em5f1b
Development dependency update @devowl-wp/api 1.14.0
Purpose of dependency: Shared typings for all Node.js backends and frontends.
Features
- extend Zod with OpenAPI and document MQueue group-retry overtake internal reference #869c8tj4a
5.3.8 2026-09-29
Bug Fixes
-
add condition to skip consent saving check via REST API when defined internal reference #869f27tv3
-
keep anonymous consent REST free of Application Password auth internal reference #869f27tv3
-
keep cookie policy legal links when shortcode type was translated internal reference #869f70xut
-
scope anonymous consent Application Password bypass to Real Cookie Banner namespace internal reference #869f27tv3
-
skip auto-rescan on WooCommerce stock-only product saves internal reference #869etcjj0
-
skip Events Manager Google Maps load when no map markup is present internal reference #869f8pnaq
Performance Improvements
-
optimize pagespeed by externalizing localized payload delivery (experimental opt-in, internal reference #869em5f1b
Dependency updates @devowl-wp/deliver-anonymous-asset 1.0.62
Purpose of dependency: Provide a functionality to deliver assets anonymous
Bug Fixes
-
avoid advertising anonymous asset URLs when file writes fail internal reference #869em5f1b
-
remove unreleased leftover sweeps from anonymous asset purge internal reference #869f825b6
Performance Improvements
- optimize pagespeed by externalizing localized payload delivery (experimental opt-in, internal reference #869em5f1b
Dependency updates @devowl-wp/headless-content-blocker 1.4.18
Purpose of dependency: Block HTML content by URLs and selector syntax
Bug Fixes
- compatibility with Semplice plugin
- false-posiive Google reCATPCHA service when Wordfence is active
Dependency updates @devowl-wp/react-cookie-banner 1.1.48
Purpose of dependency: Provide UI for a cookie banner and content blocker for multiple services.
Performance Improvements
- optimize pagespeed by externalizing localized payload delivery (experimental opt-in, internal reference #869em5f1b
Dependency updates @devowl-wp/real-product-manager-wp-client 1.22.4
Purpose of dependency: A WordPress client for Real Product Manager
Bug Fixes
- allow Multisite license save when another site is already licensed internal reference #869emd756
- handle featureFlags as objects or arrays in License and LicenseActivation classes internal reference #869envwq6
Dependency updates @devowl-wp/utils 1.20.37
Purpose of dependency: Utility functionality for all your WordPress plugins.
Bug Fixes
-
skip the language-pack and source-map offload when nothing was built internal reference #869etm54z
Performance Improvements
- optimize pagespeed by externalizing localized payload delivery (experimental opt-in, internal reference #869em5f1b
5.3.6 2026-09-23
Bug Fixes
-
prevent stored XSS when the invisible-attribute sweep crosses an attribute quote internal reference #869f5rt7u
Documentation
-
add missing security notice for the shortcode class XSS fixed in 3.4.10 internal reference #869f5rt7u
Dependency updates @devowl-wp/fast-html-tag 1.4.2
Purpose of dependency: Find tags within HTML content and modify it in speed of light
Bug Fixes
-
prevent stored XSS when the invisible-attribute sweep crosses an attribute quote internal reference #869f5rt7u
Tests
- time only the isolated invisible-attribute sweep in the ReDoS guard internal reference #869f5rt7u