@magicfeedback/popup-sdk 1.13.0 → 1.15.0

package/README.md

@@ -143,6 +143,11 @@ Config fields:
   or positioning, so the host mounts its own `Modal`/container and controls the styling. This
   avoids a "double modal" when the host already wraps the WebView. The survey stays fully
   functional (message bridge, form, nav buttons, close). No effect on the web DOM popup.
+- `cspNonce?: string` — for pages with a strict Content-Security-Policy (`style-src 'nonce-…'`
+  without `'unsafe-inline'`). The popup puts it on every `<style>` it injects into `<head>`
+  (survey stylesheet, spinner, responsive rules, `surveyCss`, `@font-face`); without it the
+  browser blocks them and the survey renders unstyled. Pass the same nonce your CSP header
+  uses for that response (in Angular, the `CSP_NONCE` token). Web only.
 - `language?: string` — BCP-47 tag (`'en'`, `'en-US'`, …) used for popup language
   segmentation (`segments.lang`) and for the analytics context. If omitted it is
   auto-detected from `navigator.language`, falling back to the `Intl` locale (which is
@@ -534,7 +539,7 @@ interface DeepdotsEvent {
 - The default browser renderer uses Deepdots forms and applies button labels from `actions.accept`, `actions.start`, `actions.back`, and `actions.complete`.
 - `title`, `message`, and `style` belong to the popup definition contract, but the current browser renderer focuses on the embedded form and does not render those fields as standalone popup copy/layout controls.
 - `actions.decline` is accepted in the definition shape, but the current browser renderer does not render a dedicated decline button or enforce `decline.cooldownDays`.
-- In browser mode, the SDK creates `#deepdots-popup-container` and injects the shared popup stylesheet from jsDelivr.
+- In browser mode, the default renderer creates a single `#deepdots-popup-container` on `document.body` and injects the popup and survey stylesheets into `<head>` (bundled with the SDK, no external request). With a custom renderer (`setRenderer`) the SDK adds no container of its own.
 
 ## Running The Examples Locally
 

package/dist/assets/assets/style.css

@@ -1,7 +1,7 @@
 /**
  * NO EDITAR A MANO — generado por scripts/vendor-survey-css.mjs
  *
- * Copia de @magicfeedback/native@2.2.31 → dist/styles/magicfeedback-default.css
+ * Copia de @magicfeedback/native@2.2.33 → dist/styles/magicfeedback-default.css
  * (la hoja canónica del paquete, la que apunta su campo "style"), con estos cambios locales:
  *
  *  1. Sin el @import de Google Fonts (Nunito): no queremos una petición externa desde la

package/dist/{chunk-GXEPYT33.mjs → chunk-C7VD3HY4.mjs}

@@ -524,7 +524,7 @@ function ddSetSurveyBusy(el, busy){
 var style_default = `/**
  * NO EDITAR A MANO \u2014 generado por scripts/vendor-survey-css.mjs
  *
- * Copia de @magicfeedback/native@2.2.31 \u2192 dist/styles/magicfeedback-default.css
+ * Copia de @magicfeedback/native@2.2.33 \u2192 dist/styles/magicfeedback-default.css
  * (la hoja can\xF3nica del paquete, la que apunta su campo "style"), con estos cambios locales:
  *
  *  1. Sin el @import de Google Fonts (Nunito): no queremos una petici\xF3n externa desde la
@@ -2741,4 +2741,4 @@ export {
   sdkWarn,
   sdkError
 };
-//# sourceMappingURL=chunk-GXEPYT33.mjs.map
+//# sourceMappingURL=chunk-C7VD3HY4.mjs.map