@deflectbot/deflect-sdk 1.1.6 → 1.1.8

package/dist/index.js

@@ -35,8 +35,11 @@ class Deflect {
             if (!window.Deflect.siteKey) {
                 throw new Error("API key (siteKey) is missing in configuration");
             }
-            const scriptUrl = `https://js.deflect.bot/main.js?sitekey=${window.Deflect.siteKey}`;
-            const response = yield fetch(scriptUrl);
+            const nonce = Date.now().toString();
+            const scriptUrl = `https://js.deflect.bot/main.js?sitekey=${window.Deflect.siteKey}&_=${nonce}`;
+            const response = yield fetch(scriptUrl, {
+                cache: "no-store",
+            });
             if (!response.ok) {
                 throw new Error("Failed to fetch the Deflect script");
             }
@@ -47,7 +50,8 @@ class Deflect {
             const scriptEl = document.createElement("script");
             scriptEl.type = "module";
             const blob = new Blob([yield response.text()], { type: "text/javascript" });
-            scriptEl.src = URL.createObjectURL(blob);
+            const blobUrl = URL.createObjectURL(blob);
+            scriptEl.src = blobUrl;
             document.head.appendChild(scriptEl);
             yield new Promise((resolve, reject) => {
                 scriptEl.onload = () => resolve();
@@ -59,6 +63,11 @@ class Deflect {
                 throw new Error("Deflect script did not load properly");
             }
             const token = yield window.Deflect.getToken();
+            URL.revokeObjectURL(blobUrl);
+            scriptEl.remove();
+            // Optional: wipe memory-heavy fields
+            delete window.Deflect.getToken;
+            delete window.Deflect.ready;
             return token;
         });
     }

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@deflectbot/deflect-sdk",
-  "version": "1.1.6",
-  "description": "",
+  "version": "1.1.8",
+  "description": "SDK for deflect.bot - Use it for seamless captcha integration on any website.",
   "main": "dist/index.js",
   "types": "dist/types/index.d.ts",
   "scripts": {
     "build": "tsc"
   },
-  "author": "Fredrik Rafn",
+  "author": "Deflect",
   "license": "MIT",
   "devDependencies": {
     "@eslint/js": "^9.22.0",

package/src/index.ts

@@ -33,8 +33,13 @@ class Deflect {
       throw new Error("API key (siteKey) is missing in configuration");
     }
   
-    const scriptUrl = `https://js.deflect.bot/main.js?sitekey=${window.Deflect.siteKey}`;
-    const response = await fetch(scriptUrl);
+    const nonce = Date.now().toString();
+    const scriptUrl = `https://js.deflect.bot/main.js?sitekey=${window.Deflect.siteKey}&_=${nonce}`;
+    const response = await fetch(scriptUrl,
+      {
+        cache: "no-store",
+      }
+    );
 
     if (!response.ok) {
       throw new Error("Failed to fetch the Deflect script");
@@ -49,7 +54,8 @@ class Deflect {
     scriptEl.type = "module";
 
     const blob = new Blob([await response.text()], { type: "text/javascript" });
-    scriptEl.src = URL.createObjectURL(blob);
+    const blobUrl = URL.createObjectURL(blob);
+    scriptEl.src = blobUrl;
   
     document.head.appendChild(scriptEl);
   
@@ -68,6 +74,13 @@ class Deflect {
     }
   
     const token = await window.Deflect.getToken();
+    URL.revokeObjectURL(blobUrl);
+    scriptEl.remove();
+
+    // Optional: wipe memory-heavy fields
+    delete window.Deflect.getToken;
+    delete window.Deflect.ready;
+
     return token;
   }