@botfabrik/engine-webclient 4.109.12-alpha.0 → 4.109.12-alpha.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +4 -0
- package/package.json +2 -2
package/dist/index.js
CHANGED
|
@@ -92,6 +92,10 @@ export default (clientName, environment, props) => async (bot) => {
|
|
|
92
92
|
frameguard: false,
|
|
93
93
|
// Send origin only, without path – sufficient for analytics while avoiding leaking URLs
|
|
94
94
|
referrerPolicy: { policy: 'strict-origin-when-cross-origin' },
|
|
95
|
+
// Disable HSTS: HTTPS enforcement is already handled globally in engine-core.
|
|
96
|
+
// Enabling it here would cause the browser to enforce HTTPS for the entire origin,
|
|
97
|
+
// which breaks local development (http://localhost:3000).
|
|
98
|
+
hsts: false,
|
|
95
99
|
// resources served by the webclient must be loadable cross-origin (e.g. embed script)
|
|
96
100
|
crossOriginResourcePolicy: { policy: 'cross-origin' },
|
|
97
101
|
}));
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@botfabrik/engine-webclient",
|
|
3
|
-
"version": "4.109.12-alpha.
|
|
3
|
+
"version": "4.109.12-alpha.1",
|
|
4
4
|
"description": "Webclient for Botfabriks Bot Engine",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "./dist/index.js",
|
|
@@ -53,5 +53,5 @@
|
|
|
53
53
|
"tsx": "^4.21.0",
|
|
54
54
|
"typescript": "5.9.3"
|
|
55
55
|
},
|
|
56
|
-
"gitHead": "
|
|
56
|
+
"gitHead": "3c8a20838f7909226b7178b3a8c4be1ea9528d4e"
|
|
57
57
|
}
|