@duckduckgo/autoconsent 16.59.0 → 16.61.0

package/dist/heuristics.cjs.js

@@ -32,6 +32,7 @@ __export(heuristic_classify_exports, {
   classifyButtons: () => classifyButtons,
   classifyPopup: () => classifyPopup,
   cleanButtonText: () => cleanButtonText,
+  hasHeuristicPatterns: () => hasHeuristicPatterns,
   isExcludedPopup: () => isExcludedPopup
 });
 module.exports = __toCommonJS(heuristic_classify_exports);
@@ -190,10 +191,20 @@ var DETECT_PATTERNS = [
   // "файлы cookie" / "cookie-файлы" / "куки-файлы" in any phrasing
   /(?:файл[а-яё]*[\s-]+(?:cookie|куки)|(?:cookie|куки)[\s-]+файл[а-яё]*)/gi,
   // Italian (IT)
-  /usiamo.{0,20}cookie/gi,
+  // e.g. "usiamo i cookie", "utilizziamo cookie tecnici", "questo sito utilizza i cookie", "noi e i nostri partner utilizziamo i cookie"
+  /(?:usiamo|utilizziamo).{0,20}cookie/gi,
+  /sito.{0,50}(?:usa|utilizza).{0,20}cookie/gi,
+  /noi e i nostri.{0,20}partner.{0,100}cookie/gi,
+  /(?:archiviare|memorizzare) e\/o accedere a informazioni su un dispositivo/gi,
+  // Swedish (SV)
+  // e.g. "vi använder cookies", "vi använder spårningstekniker såsom cookies", "webbplatsen använder kakor"
+  /(?:vi|webbplatsen|webbplats|sajten|sidan)\s+använder.{0,60}(?:cookies|kakor)/gi,
   // Japanese (JA)
   // e.g. "当サイトはCookieを使用しています", "クッキー（Cookie）を利用しています"
-  /(?:cookie|クッキー).{0,10}を(?:使用|利用)/gi
+  /(?:cookie|クッキー).{0,10}を(?:使用|利用)/gi,
+  // Danish (DA)
+  // e.g. "vi bruger cookies", "hjemmesiden bruger cookies til at ..."
+  /bruger cookies/gi
 ];
 var REJECT_PATTERNS_ENGLISH = [
   // e.g. "reject", "reject all", "reject all cookies", "deny all", "refuse cookies", "decline",
@@ -327,6 +338,14 @@ var REJECT_PATTERNS_SWEDISH = [
   "till\xE5t inte cookies",
   "jag accepterar endast grundl\xE4ggande kakor"
 ];
+var REJECT_PATTERNS_DANISH = [
+  // afvis / afvis alle / afvis alle cookies (reject verbs)
+  /(^|\s)afvis/is,
+  // (accept/allow) only necessary cookies
+  /^(accepter\s+|tillad\s+)?(kun|udelukkende)\s+(strengt\s+)?nødvendige( cookies)?$/is,
+  // "nej tak" (no thanks)
+  /^nej(,?\s+tak)?$/is
+];
 var REJECT_PATTERNS_CATALAN = [/(^|\s)rebutj/is, "no accepto", "no, gr\xE0cies"];
 var REJECT_PATTERNS_GALICIAN = [/(^|\s)rexeitar/is];
 var REJECT_PATTERNS_BASQUE = [/(^|\s)(baztertu|ukatu)/is];
@@ -373,6 +392,7 @@ var REJECT_PATTERNS = [
   ...REJECT_PATTERNS_BRAZILIAN_PORTUGUESE,
   ...REJECT_PATTERNS_SPANISH,
   ...REJECT_PATTERNS_SWEDISH,
+  ...REJECT_PATTERNS_DANISH,
   ...REJECT_PATTERNS_CATALAN,
   ...REJECT_PATTERNS_GALICIAN,
   ...REJECT_PATTERNS_BASQUE,
@@ -722,7 +742,8 @@ var ACCEPT_PATTERNS = [
   "kabul et",
   // Italian (IT)
   "accetta",
-  "accetta tutti i cookie"
+  "accetta tutti i cookie",
+  "accetto tutti i cookie"
 ];
 var ACKNOWLEDGE_PATTERNS = [
   // close / dismiss the banner/dialog/message (multilingual). The negative lookahead avoids
@@ -798,6 +819,10 @@ function checkHeuristicPatterns(allText, detectPatterns = DETECT_PATTERNS) {
   }
   return { patterns, snippets };
 }
+function hasHeuristicPatterns(allText, detectPatterns = DETECT_PATTERNS) {
+  const text = allText.slice(0, TEXT_LIMIT);
+  return detectPatterns.some((p) => text.search(p) !== -1);
+}
 function classifyButtons(buttons) {
   for (const button of buttons) {
     button.regexClassification = classifyButtonTextRegex(button.text);
@@ -882,5 +907,6 @@ function classifyButtonTextRegex(buttonText) {
   classifyButtons,
   classifyPopup,
   cleanButtonText,
+  hasHeuristicPatterns,
   isExcludedPopup
 });

package/dist/heuristics.mjs

@@ -152,10 +152,20 @@ var DETECT_PATTERNS = [
   // "файлы cookie" / "cookie-файлы" / "куки-файлы" in any phrasing
   /(?:файл[а-яё]*[\s-]+(?:cookie|куки)|(?:cookie|куки)[\s-]+файл[а-яё]*)/gi,
   // Italian (IT)
-  /usiamo.{0,20}cookie/gi,
+  // e.g. "usiamo i cookie", "utilizziamo cookie tecnici", "questo sito utilizza i cookie", "noi e i nostri partner utilizziamo i cookie"
+  /(?:usiamo|utilizziamo).{0,20}cookie/gi,
+  /sito.{0,50}(?:usa|utilizza).{0,20}cookie/gi,
+  /noi e i nostri.{0,20}partner.{0,100}cookie/gi,
+  /(?:archiviare|memorizzare) e\/o accedere a informazioni su un dispositivo/gi,
+  // Swedish (SV)
+  // e.g. "vi använder cookies", "vi använder spårningstekniker såsom cookies", "webbplatsen använder kakor"
+  /(?:vi|webbplatsen|webbplats|sajten|sidan)\s+använder.{0,60}(?:cookies|kakor)/gi,
   // Japanese (JA)
   // e.g. "当サイトはCookieを使用しています", "クッキー（Cookie）を利用しています"
-  /(?:cookie|クッキー).{0,10}を(?:使用|利用)/gi
+  /(?:cookie|クッキー).{0,10}を(?:使用|利用)/gi,
+  // Danish (DA)
+  // e.g. "vi bruger cookies", "hjemmesiden bruger cookies til at ..."
+  /bruger cookies/gi
 ];
 var REJECT_PATTERNS_ENGLISH = [
   // e.g. "reject", "reject all", "reject all cookies", "deny all", "refuse cookies", "decline",
@@ -289,6 +299,14 @@ var REJECT_PATTERNS_SWEDISH = [
   "till\xE5t inte cookies",
   "jag accepterar endast grundl\xE4ggande kakor"
 ];
+var REJECT_PATTERNS_DANISH = [
+  // afvis / afvis alle / afvis alle cookies (reject verbs)
+  /(^|\s)afvis/is,
+  // (accept/allow) only necessary cookies
+  /^(accepter\s+|tillad\s+)?(kun|udelukkende)\s+(strengt\s+)?nødvendige( cookies)?$/is,
+  // "nej tak" (no thanks)
+  /^nej(,?\s+tak)?$/is
+];
 var REJECT_PATTERNS_CATALAN = [/(^|\s)rebutj/is, "no accepto", "no, gr\xE0cies"];
 var REJECT_PATTERNS_GALICIAN = [/(^|\s)rexeitar/is];
 var REJECT_PATTERNS_BASQUE = [/(^|\s)(baztertu|ukatu)/is];
@@ -335,6 +353,7 @@ var REJECT_PATTERNS = [
   ...REJECT_PATTERNS_BRAZILIAN_PORTUGUESE,
   ...REJECT_PATTERNS_SPANISH,
   ...REJECT_PATTERNS_SWEDISH,
+  ...REJECT_PATTERNS_DANISH,
   ...REJECT_PATTERNS_CATALAN,
   ...REJECT_PATTERNS_GALICIAN,
   ...REJECT_PATTERNS_BASQUE,
@@ -684,7 +703,8 @@ var ACCEPT_PATTERNS = [
   "kabul et",
   // Italian (IT)
   "accetta",
-  "accetta tutti i cookie"
+  "accetta tutti i cookie",
+  "accetto tutti i cookie"
 ];
 var ACKNOWLEDGE_PATTERNS = [
   // close / dismiss the banner/dialog/message (multilingual). The negative lookahead avoids
@@ -760,6 +780,10 @@ function checkHeuristicPatterns(allText, detectPatterns = DETECT_PATTERNS) {
   }
   return { patterns, snippets };
 }
+function hasHeuristicPatterns(allText, detectPatterns = DETECT_PATTERNS) {
+  const text = allText.slice(0, TEXT_LIMIT);
+  return detectPatterns.some((p) => text.search(p) !== -1);
+}
 function classifyButtons(buttons) {
   for (const button of buttons) {
     button.regexClassification = classifyButtonTextRegex(button.text);
@@ -843,5 +867,6 @@ export {
   classifyButtons,
   classifyPopup,
   cleanButtonText,
+  hasHeuristicPatterns,
   isExcludedPopup
 };

package/dist/types/cmps/onetrust.d.ts

@@ -5,6 +5,7 @@ export default class Onetrust extends AutoConsentCMPBase {
     get hasSelfTest(): boolean;
     get isIntermediate(): boolean;
     get isCosmetic(): boolean;
+    waitForSdk(): Promise<void>;
     detectCmp(): Promise<boolean>;
     detectPopup(): Promise<boolean>;
     optOut(): Promise<boolean>;

package/dist/types/eval-snippets.d.ts

@@ -40,6 +40,9 @@ export declare const snippets: {
     EVAL_COOKIEFIRST_1: () => boolean;
     EVAL_COOKIEINFORMATION_0: () => any;
     EVAL_COOKIEINFORMATION_1: () => any;
+    EVAL_COOKIEREPORTS_OPT_OUT: () => boolean;
+    EVAL_COOKIEREPORTS_OPT_IN: () => boolean;
+    EVAL_COOKIEREPORTS_TEST: () => boolean;
     EVAL_EE_CONSENT_DECLINE_0: () => boolean;
     EVAL_ETSY_0: () => boolean;
     EVAL_ETSY_1: () => any;

package/dist/types/heuristic-classify.d.ts

@@ -9,6 +9,7 @@ export declare function checkHeuristicPatterns(allText: string, detectPatterns?:
     patterns: string[];
     snippets: string[];
 };
+export declare function hasHeuristicPatterns(allText: string, detectPatterns?: RegExp[]): boolean;
 export declare function classifyButtons(buttons: ClassifiableButton[]): void;
 export declare function isExcludedPopup(popupText: string, excludePatterns?: RegExp[]): boolean;
 export declare function classifyPopup(buttons: ClassifiableButton[]): PopupClassification;

package/dist/types/heuristics.d.ts

@@ -1,11 +1,20 @@
 import { ButtonData, HeuristicLevel, PopupData } from './types';
 export declare function getActionablePopups(mode?: HeuristicLevel, timeout?: number): PopupData[];
+/**
+ * @param timeout time budget for the whole search, in ms
+ */
 export declare function getPotentialPopups(timeout?: number): PopupData[];
+/**
+ * The whole document of a frame, if it is rendered and has text. The body can have zero height when all of its
+ * content is positioned, so only check visibility styles, not size.
+ */
+export declare function getFramePopupElement(doc: Document): HTMLElement | null;
 export declare function isDialogLikeElement(node: HTMLElement): boolean;
 /**
  * Serialize all actionable buttons on the page
+ * @param shadowHosts open shadow hosts on the page, if already known; otherwise they are searched for under el
  */
-export declare function getButtonData(el: HTMLElement): ButtonData[];
+export declare function getButtonData(el: HTMLElement, shadowHosts?: HTMLElement[]): ButtonData[];
 export declare function isDisabled(el: HTMLElement): boolean;
 /**
  * Leave only elements that do not contain any other elements

package/lib/cmps/onetrust.ts

@@ -17,6 +17,19 @@ export default class Onetrust extends AutoConsentCMPBase {
         return false;
     }
 
+    // Some sites pre-render the banner before the SDK loads, and clicks before then may be lost.
+    // Sites that copy the markup without the SDK never get #onetrust-style, so only wait when the page loads the SDK.
+    async waitForSdk() {
+        if (this.elementExists('#onetrust-style')) {
+            return;
+        }
+        const sdkRef = /cookielaw\.org|otSDKStub|otBannerSdk/;
+        const sdkExpected = Array.from(document.scripts).some((s) => sdkRef.test(s.src) || (!s.src && sdkRef.test(s.textContent || '')));
+        if (sdkExpected) {
+            await this.waitForElement('#onetrust-style', 10000);
+        }
+    }
+
     async detectCmp() {
         return this.elementExists('#onetrust-banner-sdk') || this.elementVisible('#onetrust-pc-sdk', 'any');
     }
@@ -27,6 +40,7 @@ export default class Onetrust extends AutoConsentCMPBase {
 
     async optOut() {
         await this.wait(500);
+        await this.waitForSdk();
         // 'reject all' shortcuts
         if (this.elementVisible('#onetrust-reject-all-handler', 'any')) {
             return await this.click('#onetrust-reject-all-handler');
@@ -86,6 +100,7 @@ export default class Onetrust extends AutoConsentCMPBase {
     }
 
     async optIn() {
+        await this.waitForSdk();
         return await this.click('#onetrust-accept-btn-handler,#accept-recommended-btn-handler,.js-accept-cookies');
     }
 

package/lib/eval-snippets.ts

@@ -148,6 +148,27 @@ export const snippets = {
             .forEach((i) => i.getAttribute('aria-checked') === 'true' && i.click()) || true,
     EVAL_COOKIEINFORMATION_0: () => CookieInformation.declineAllCategories() || true,
     EVAL_COOKIEINFORMATION_1: () => CookieInformation.submitAllCategories() || true,
+    // banner button order and meaning are configurable per site, so set the consent levels through the public API
+    EVAL_COOKIEREPORTS_OPT_OUT: () => {
+        const cr = window._cookiereports;
+        if (typeof cr?.saveConsent !== 'function') return false;
+        cr.saveConsent({ 1: true, 2: false, 3: false, 4: false, 5: false });
+        cr.processConsent('banner', { trigger: 'ok' });
+        cr.hideBanner();
+        return true;
+    },
+    EVAL_COOKIEREPORTS_OPT_IN: () => {
+        const cr = window._cookiereports;
+        if (typeof cr?.saveConsent !== 'function') return false;
+        cr.saveConsent({ 1: true, 2: true, 3: true, 4: true, 5: true });
+        cr.processConsent('banner', { trigger: 'ok' });
+        cr.hideBanner();
+        return true;
+    },
+    EVAL_COOKIEREPORTS_TEST: () => {
+        const levels = window._cookiereports?.loadConsent?.();
+        return !!levels && Object.keys(levels).length > 0 && Object.values(levels).every((v) => !v);
+    },
     // turn the single-button form into a decline submission, same fields as the CMP's own decline form
     EVAL_EE_CONSENT_DECLINE_0: () =>
         document.querySelectorAll('#cookieConsentFormAccept input[name^="ee:cookies_"]').forEach((i) => (i.value = 'n')) || true,

package/lib/heuristic-classify.ts

@@ -44,6 +44,12 @@ export function checkHeuristicPatterns(allText: string, detectPatterns = DETECT_
     return { patterns, snippets };
 }
 
+// same result as checking checkHeuristicPatterns() for patterns, but stops at the first match
+export function hasHeuristicPatterns(allText: string, detectPatterns = DETECT_PATTERNS): boolean {
+    const text = allText.slice(0, TEXT_LIMIT);
+    return detectPatterns.some((p) => text.search(p) !== -1);
+}
+
 export function classifyButtons(buttons: ClassifiableButton[]) {
     for (const button of buttons) {
         button.regexClassification = classifyButtonTextRegex(button.text);

package/lib/heuristic-patterns.ts

@@ -165,11 +165,23 @@ export const DETECT_PATTERNS = [
     /(?:файл[а-яё]*[\s-]+(?:cookie|куки)|(?:cookie|куки)[\s-]+файл[а-яё]*)/gi,
 
     // Italian (IT)
-    /usiamo.{0,20}cookie/gi,
+    // e.g. "usiamo i cookie", "utilizziamo cookie tecnici", "questo sito utilizza i cookie", "noi e i nostri partner utilizziamo i cookie"
+    /(?:usiamo|utilizziamo).{0,20}cookie/gi,
+    /sito.{0,50}(?:usa|utilizza).{0,20}cookie/gi,
+    /noi e i nostri.{0,20}partner.{0,100}cookie/gi,
+    /(?:archiviare|memorizzare) e\/o accedere a informazioni su un dispositivo/gi,
+
+    // Swedish (SV)
+    // e.g. "vi använder cookies", "vi använder spårningstekniker såsom cookies", "webbplatsen använder kakor"
+    /(?:vi|webbplatsen|webbplats|sajten|sidan)\s+använder.{0,60}(?:cookies|kakor)/gi,
 
     // Japanese (JA)
     // e.g. "当サイトはCookieを使用しています", "クッキー（Cookie）を利用しています"
     /(?:cookie|クッキー).{0,10}を(?:使用|利用)/gi,
+
+    // Danish (DA)
+    // e.g. "vi bruger cookies", "hjemmesiden bruger cookies til at ..."
+    /bruger cookies/gi,
 ];
 
 const REJECT_PATTERNS_ENGLISH = [
@@ -350,6 +362,17 @@ const REJECT_PATTERNS_SWEDISH = [
     'jag accepterar endast grundläggande kakor',
 ];
 
+const REJECT_PATTERNS_DANISH = [
+    // afvis / afvis alle / afvis alle cookies (reject verbs)
+    /(^|\s)afvis/is,
+
+    // (accept/allow) only necessary cookies
+    /^(accepter\s+|tillad\s+)?(kun|udelukkende)\s+(strengt\s+)?nødvendige( cookies)?$/is,
+
+    // "nej tak" (no thanks)
+    /^nej(,?\s+tak)?$/is,
+];
+
 const REJECT_PATTERNS_CATALAN = [/(^|\s)rebutj/is, 'no accepto', 'no, gràcies'];
 
 const REJECT_PATTERNS_GALICIAN = [/(^|\s)rexeitar/is];
@@ -415,6 +438,7 @@ export const REJECT_PATTERNS = [
     ...REJECT_PATTERNS_BRAZILIAN_PORTUGUESE,
     ...REJECT_PATTERNS_SPANISH,
     ...REJECT_PATTERNS_SWEDISH,
+    ...REJECT_PATTERNS_DANISH,
     ...REJECT_PATTERNS_CATALAN,
     ...REJECT_PATTERNS_GALICIAN,
     ...REJECT_PATTERNS_BASQUE,
@@ -806,6 +830,7 @@ export const ACCEPT_PATTERNS = [
     // Italian (IT)
     'accetta',
     'accetta tutti i cookie',
+    'accetto tutti i cookie',
 ];
 
 export const ACKNOWLEDGE_PATTERNS = [