@networkpro/web 1.25.13 → 1.25.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +33 -1
- package/package.json +4 -3
- package/src/hooks.server.js +2 -2
- package/src/service-worker.js +1 -0
package/CHANGELOG.md
CHANGED
|
@@ -22,6 +22,36 @@ This project attempts to follow [Keep a Changelog](https://keepachangelog.com/en
|
|
|
22
22
|
|
|
23
23
|
---
|
|
24
24
|
|
|
25
|
+
## [1.25.15] - 2025-11-18
|
|
26
|
+
|
|
27
|
+
### Added
|
|
28
|
+
|
|
29
|
+
- Added `https://vercel-insights.com` to `script-src` and `connect-src` in `hooks.server.js` to allow for Vercel Analytics.
|
|
30
|
+
|
|
31
|
+
### Changed
|
|
32
|
+
|
|
33
|
+
- Added `vercel-insights.com` to the `disallowedHosts` list in `service-worker.js`, in order to prevent SW caching.
|
|
34
|
+
- Bumped project version to `v1.25.15`.
|
|
35
|
+
- Updated dependencies:
|
|
36
|
+
- `svelte` `5.43.10` → `5.43.12`
|
|
37
|
+
|
|
38
|
+
---
|
|
39
|
+
|
|
40
|
+
## [1.25.14] - 2025-11-18
|
|
41
|
+
|
|
42
|
+
### Changed
|
|
43
|
+
|
|
44
|
+
- Bumped project version to `v1.25.14`.
|
|
45
|
+
- Updated dependencies:
|
|
46
|
+
- `svelte` `5.43.7` → `5.43.10`
|
|
47
|
+
- `posthog-js` `^1.293.0` → `^1.295.0`
|
|
48
|
+
|
|
49
|
+
### Security
|
|
50
|
+
|
|
51
|
+
- Added transitive dependency override for `glob` to `^11.1.0`, in order to address CVE-2025-64756.
|
|
52
|
+
|
|
53
|
+
---
|
|
54
|
+
|
|
25
55
|
## [1.25.13] - 2025-11-16
|
|
26
56
|
|
|
27
57
|
### Changed
|
|
@@ -1915,7 +1945,9 @@ This enables analytics filtering and CSP hardening for the audit environment.
|
|
|
1915
1945
|
|
|
1916
1946
|
<!-- Link references -->
|
|
1917
1947
|
|
|
1918
|
-
[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.25.
|
|
1948
|
+
[Unreleased]: https://github.com/netwk-pro/netwk-pro.github.io/compare/v1.25.15...HEAD
|
|
1949
|
+
[1.25.15]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.15
|
|
1950
|
+
[1.25.14]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.14
|
|
1919
1951
|
[1.25.13]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.13
|
|
1920
1952
|
[1.25.12]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.12
|
|
1921
1953
|
[1.25.11]: https://github.com/netwk-pro/netwk-pro.github.io/releases/tag/v1.25.11
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@networkpro/web",
|
|
3
3
|
"private": false,
|
|
4
|
-
"version": "1.25.
|
|
4
|
+
"version": "1.25.15",
|
|
5
5
|
"description": "Locking Down Networks, Unlocking Confidence™ | Security, Networking, Privacy — Network Pro Strategies",
|
|
6
6
|
"keywords": [
|
|
7
7
|
"advisory",
|
|
@@ -86,9 +86,9 @@
|
|
|
86
86
|
},
|
|
87
87
|
"dependencies": {
|
|
88
88
|
"dompurify": "^3.3.0",
|
|
89
|
-
"posthog-js": "^1.
|
|
89
|
+
"posthog-js": "^1.295.0",
|
|
90
90
|
"semver": "^7.7.3",
|
|
91
|
-
"svelte": "5.43.
|
|
91
|
+
"svelte": "5.43.12"
|
|
92
92
|
},
|
|
93
93
|
"devDependencies": {
|
|
94
94
|
"@eslint/compat": "^2.0.0",
|
|
@@ -135,6 +135,7 @@
|
|
|
135
135
|
},
|
|
136
136
|
"overrides": {
|
|
137
137
|
"cookie": "^1.0.0",
|
|
138
|
+
"glob": "^11.1.0",
|
|
138
139
|
"js-yaml": "^4.1.1",
|
|
139
140
|
"tar": ">=7.5.2",
|
|
140
141
|
"tmp": ">=0.2.4"
|
package/src/hooks.server.js
CHANGED
|
@@ -51,10 +51,10 @@ export async function handle({ event, resolve }) {
|
|
|
51
51
|
|
|
52
52
|
const cspDirectives = [
|
|
53
53
|
"default-src 'self';",
|
|
54
|
-
"script-src 'self' 'unsafe-inline' https://us.i.posthog.com https://us-assets.i.posthog.com;",
|
|
54
|
+
"script-src 'self' 'unsafe-inline' https://us.i.posthog.com https://us-assets.i.posthog.com https://vercel-insights.com;",
|
|
55
55
|
"style-src 'self' 'unsafe-inline';",
|
|
56
56
|
"img-src 'self' data:;",
|
|
57
|
-
"connect-src 'self' https://us.i.posthog.com https://us-assets.i.posthog.com;",
|
|
57
|
+
"connect-src 'self' https://us.i.posthog.com https://us-assets.i.posthog.com https://vercel-insights.com;",
|
|
58
58
|
"font-src 'self' data:;",
|
|
59
59
|
"form-action 'self';",
|
|
60
60
|
"base-uri 'self';",
|
package/src/service-worker.js
CHANGED
|
@@ -17,6 +17,7 @@ const isDev = location.hostname === 'localhost';
|
|
|
17
17
|
const disallowedHosts = [
|
|
18
18
|
'us.i.posthog.com', // Add PostHog to disallowed hosts
|
|
19
19
|
'posthog.com', // Add PostHog to disallowed hosts
|
|
20
|
+
'vercel-insights.com', // Add Vercel to disallowed hosts
|
|
20
21
|
];
|
|
21
22
|
|
|
22
23
|
import { build, files, version } from '$service-worker';
|