@commercetools-frontend/constants 24.2.0 → 24.3.0

package/dist/commercetools-frontend-constants.cjs.dev.js

@@ -3,7 +3,7 @@
 Object.defineProperty(exports, '__esModule', { value: true });
 
 // NOTE: This string will be replaced on build time with the package version.
-var version = "24.2.0";
+var version = "24.3.0";
 
 /**
  * The project key must be between 2 and 36 characters long. It can only contain alphanumeric lowercase characters (a-z, 0-9),
@@ -157,12 +157,13 @@ const STORAGE_KEYS = {
 };
 const HTTP_SECURITY_HEADER_KEYS = {
   'Content-Security-Policy': 'Content-Security-Policy',
-  'Referrer-Policy': 'Referrer-Policy',
   'Permissions-Policy': 'Permissions-Policy',
+  'Referrer-Policy': 'Referrer-Policy',
   'Strict-Transport-Security': 'Strict-Transport-Security',
-  'X-XSS-Protection': 'X-XSS-Protection',
   'X-Content-Type-Options': 'X-Content-Type-Options',
-  'X-Frame-Options': 'X-Frame-Options'
+  'X-Frame-Options': 'X-Frame-Options',
+  // @deprecated: this header is not supported by the browser anymore. Use `Content-Security-Policy` instead.
+  'X-XSS-Protection': 'X-XSS-Protection'
 };
 const HTTP_SECURITY_HEADERS = {
   [HTTP_SECURITY_HEADER_KEYS['Referrer-Policy']]: 'same-origin',
@@ -171,7 +172,6 @@ const HTTP_SECURITY_HEADERS = {
   // can inherit the main application permissions policy and override other directives if needed.
   'microphone=(self), camera=(self), payment=(self), usb=(self), geolocation=(self)',
   [HTTP_SECURITY_HEADER_KEYS['Strict-Transport-Security']]: 'max-age=31536000; includeSubDomains; preload',
-  [HTTP_SECURITY_HEADER_KEYS['X-XSS-Protection']]: '1; mode=block',
   [HTTP_SECURITY_HEADER_KEYS['X-Content-Type-Options']]: 'nosniff',
   [HTTP_SECURITY_HEADER_KEYS['X-Frame-Options']]: 'SAMEORIGIN'
 };
@@ -181,7 +181,8 @@ const CUSTOM_VIEWS_EVENTS_NAMES = {
   CUSTOM_VIEW_BOOTSTRAP: 'custom-view-bootstrap',
   CUSTOM_VIEW_INITIALIZATION: 'custom-view-initialization',
   CUSTOM_VIEW_CLOSE: 'custom-view-close',
-  CUSTOM_VIEW_READY: 'custom-view-ready'
+  CUSTOM_VIEW_READY: 'custom-view-ready',
+  CUSTOM_VIEW_ON_CLOSE_AFTER: 'custom-view-on-close-after'
 };
 const CUSTOM_VIEWS_EVENTS_META = {
   HOST_APPLICATION_CODE: 'mc-host-application',

package/dist/commercetools-frontend-constants.cjs.prod.js

@@ -3,7 +3,7 @@
 Object.defineProperty(exports, '__esModule', { value: true });
 
 // NOTE: This string will be replaced on build time with the package version.
-var version = "24.2.0";
+var version = "24.3.0";
 
 /**
  * The project key must be between 2 and 36 characters long. It can only contain alphanumeric lowercase characters (a-z, 0-9),
@@ -157,12 +157,13 @@ const STORAGE_KEYS = {
 };
 const HTTP_SECURITY_HEADER_KEYS = {
   'Content-Security-Policy': 'Content-Security-Policy',
-  'Referrer-Policy': 'Referrer-Policy',
   'Permissions-Policy': 'Permissions-Policy',
+  'Referrer-Policy': 'Referrer-Policy',
   'Strict-Transport-Security': 'Strict-Transport-Security',
-  'X-XSS-Protection': 'X-XSS-Protection',
   'X-Content-Type-Options': 'X-Content-Type-Options',
-  'X-Frame-Options': 'X-Frame-Options'
+  'X-Frame-Options': 'X-Frame-Options',
+  // @deprecated: this header is not supported by the browser anymore. Use `Content-Security-Policy` instead.
+  'X-XSS-Protection': 'X-XSS-Protection'
 };
 const HTTP_SECURITY_HEADERS = {
   [HTTP_SECURITY_HEADER_KEYS['Referrer-Policy']]: 'same-origin',
@@ -171,7 +172,6 @@ const HTTP_SECURITY_HEADERS = {
   // can inherit the main application permissions policy and override other directives if needed.
   'microphone=(self), camera=(self), payment=(self), usb=(self), geolocation=(self)',
   [HTTP_SECURITY_HEADER_KEYS['Strict-Transport-Security']]: 'max-age=31536000; includeSubDomains; preload',
-  [HTTP_SECURITY_HEADER_KEYS['X-XSS-Protection']]: '1; mode=block',
   [HTTP_SECURITY_HEADER_KEYS['X-Content-Type-Options']]: 'nosniff',
   [HTTP_SECURITY_HEADER_KEYS['X-Frame-Options']]: 'SAMEORIGIN'
 };
@@ -181,7 +181,8 @@ const CUSTOM_VIEWS_EVENTS_NAMES = {
   CUSTOM_VIEW_BOOTSTRAP: 'custom-view-bootstrap',
   CUSTOM_VIEW_INITIALIZATION: 'custom-view-initialization',
   CUSTOM_VIEW_CLOSE: 'custom-view-close',
-  CUSTOM_VIEW_READY: 'custom-view-ready'
+  CUSTOM_VIEW_READY: 'custom-view-ready',
+  CUSTOM_VIEW_ON_CLOSE_AFTER: 'custom-view-on-close-after'
 };
 const CUSTOM_VIEWS_EVENTS_META = {
   HOST_APPLICATION_CODE: 'mc-host-application',

package/dist/commercetools-frontend-constants.esm.js

@@ -1,5 +1,5 @@
 // NOTE: This string will be replaced on build time with the package version.
-var version = "24.2.0";
+var version = "24.3.0";
 
 /**
  * The project key must be between 2 and 36 characters long. It can only contain alphanumeric lowercase characters (a-z, 0-9),
@@ -153,12 +153,13 @@ const STORAGE_KEYS = {
 };
 const HTTP_SECURITY_HEADER_KEYS = {
   'Content-Security-Policy': 'Content-Security-Policy',
-  'Referrer-Policy': 'Referrer-Policy',
   'Permissions-Policy': 'Permissions-Policy',
+  'Referrer-Policy': 'Referrer-Policy',
   'Strict-Transport-Security': 'Strict-Transport-Security',
-  'X-XSS-Protection': 'X-XSS-Protection',
   'X-Content-Type-Options': 'X-Content-Type-Options',
-  'X-Frame-Options': 'X-Frame-Options'
+  'X-Frame-Options': 'X-Frame-Options',
+  // @deprecated: this header is not supported by the browser anymore. Use `Content-Security-Policy` instead.
+  'X-XSS-Protection': 'X-XSS-Protection'
 };
 const HTTP_SECURITY_HEADERS = {
   [HTTP_SECURITY_HEADER_KEYS['Referrer-Policy']]: 'same-origin',
@@ -167,7 +168,6 @@ const HTTP_SECURITY_HEADERS = {
   // can inherit the main application permissions policy and override other directives if needed.
   'microphone=(self), camera=(self), payment=(self), usb=(self), geolocation=(self)',
   [HTTP_SECURITY_HEADER_KEYS['Strict-Transport-Security']]: 'max-age=31536000; includeSubDomains; preload',
-  [HTTP_SECURITY_HEADER_KEYS['X-XSS-Protection']]: '1; mode=block',
   [HTTP_SECURITY_HEADER_KEYS['X-Content-Type-Options']]: 'nosniff',
   [HTTP_SECURITY_HEADER_KEYS['X-Frame-Options']]: 'SAMEORIGIN'
 };
@@ -177,7 +177,8 @@ const CUSTOM_VIEWS_EVENTS_NAMES = {
   CUSTOM_VIEW_BOOTSTRAP: 'custom-view-bootstrap',
   CUSTOM_VIEW_INITIALIZATION: 'custom-view-initialization',
   CUSTOM_VIEW_CLOSE: 'custom-view-close',
-  CUSTOM_VIEW_READY: 'custom-view-ready'
+  CUSTOM_VIEW_READY: 'custom-view-ready',
+  CUSTOM_VIEW_ON_CLOSE_AFTER: 'custom-view-on-close-after'
 };
 const CUSTOM_VIEWS_EVENTS_META = {
   HOST_APPLICATION_CODE: 'mc-host-application',

package/dist/declarations/src/constants.d.ts

@@ -256,19 +256,18 @@ export declare const STORAGE_KEYS: {
 };
 export declare const HTTP_SECURITY_HEADER_KEYS: {
     readonly 'Content-Security-Policy': "Content-Security-Policy";
-    readonly 'Referrer-Policy': "Referrer-Policy";
     readonly 'Permissions-Policy': "Permissions-Policy";
+    readonly 'Referrer-Policy': "Referrer-Policy";
     readonly 'Strict-Transport-Security': "Strict-Transport-Security";
-    readonly 'X-XSS-Protection': "X-XSS-Protection";
     readonly 'X-Content-Type-Options': "X-Content-Type-Options";
     readonly 'X-Frame-Options': "X-Frame-Options";
+    readonly 'X-XSS-Protection': "X-XSS-Protection";
 };
-export type THttpSecurityHeaders = keyof typeof HTTP_SECURITY_HEADER_KEYS;
+export type THttpSecurityHeaders = Exclude<keyof typeof HTTP_SECURITY_HEADER_KEYS, 'X-XSS-Protection'>;
 export declare const HTTP_SECURITY_HEADERS: {
     readonly "Referrer-Policy": "same-origin";
     readonly "Permissions-Policy": "microphone=(self), camera=(self), payment=(self), usb=(self), geolocation=(self)";
     readonly "Strict-Transport-Security": "max-age=31536000; includeSubDomains; preload";
-    readonly "X-XSS-Protection": "1; mode=block";
     readonly "X-Content-Type-Options": "nosniff";
     readonly "X-Frame-Options": "SAMEORIGIN";
 };
@@ -277,6 +276,7 @@ export declare const CUSTOM_VIEWS_EVENTS_NAMES: {
     CUSTOM_VIEW_INITIALIZATION: string;
     CUSTOM_VIEW_CLOSE: string;
     CUSTOM_VIEW_READY: string;
+    CUSTOM_VIEW_ON_CLOSE_AFTER: string;
 };
 export declare const CUSTOM_VIEWS_EVENTS_META: {
     HOST_APPLICATION_CODE: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commercetools-frontend/constants",
-  "version": "24.2.0",
+  "version": "24.3.0",
   "description": "Shared constants for MC applications",
   "bugs": "https://github.com/commercetools/merchant-center-application-kit/issues",
   "repository": {