@peax/consent-core 0.6.0 → 0.9.2

package/dist/enforcement/markup.js

@@ -109,7 +109,7 @@ function createConsentMarkupGuard({ consent, root, onIssue }) {
 				const asyncValue = read(template, "async");
 				if (asyncValue !== void 0 && asyncValue !== "true" && asyncValue !== "false") throw new TypeError("Invalid data-peax-async value.");
 				const { nonce, integrity, crossOrigin, referrerPolicy } = {
-					nonce: read(template, "nonce"),
+					nonce: template.nonce || void 0,
 					integrity: read(template, "integrity"),
 					crossOrigin: read(template, "crossOrigin"),
 					referrerPolicy: read(template, "referrerPolicy")

package/dist/enforcement/request-rules.js

@@ -253,7 +253,7 @@ function createXhrInterceptor(target, rules, permissions, report) {
 		if (args.length < 2) return Reflect.apply(nativeOpen, this, args);
 		const method = domString(args[0]);
 		const urlInput = domString(args[1]);
-		const rest = args.slice(2, 5).map((value, index) => index === 0 ? Boolean(value) : value == null ? null : domString(value));
+		const rest = args.slice(2, 5).map((value, index) => index === 0 ? value === void 0 || Boolean(value) : value == null ? null : domString(value));
 		let url;
 		try {
 			url = new target.URL(urlInput, target.document.baseURI);

package/dist/index.js

@@ -360,6 +360,7 @@ function createSnapshot(currentAppPolicy, state) {
 function snapshotRequirements(snapshot) {
 	return Object.freeze(getMismatchedConsent(snapshot).map((requirement) => Object.freeze(requirement)));
 }
+var maxReentrantCommits = 100;
 /** Creates an isolated runtime from decoded data; invalid input creates no instance. */
 function createConsent(input) {
 	const result = validateWithSchema(createConsentOptionsSchema, input);
@@ -367,16 +368,28 @@ function createConsent(input) {
 	let snapshot = createSnapshot(result.data.currentAppPolicy, result.data.initialState);
 	let requirements = snapshotRequirements(snapshot);
 	const subscriptions = createConsentSubscription();
+	let delivering = false;
+	let reentrantCommits = 0;
 	function commit(currentAppPolicy, state) {
 		if (snapshot.currentAppPolicy === currentAppPolicy && snapshot.state === state) return {
 			success: true,
 			data: snapshot
 		};
+		if (delivering && ++reentrantCommits > maxReentrantCommits) throw new RangeError("Consent subscribers kept committing changes on every notification.");
 		const next = createSnapshot(currentAppPolicy, state);
 		const nextRequirements = snapshotRequirements(next);
 		snapshot = next;
 		requirements = nextRequirements;
-		subscriptions.notify();
+		if (delivering) subscriptions.notify();
+		else {
+			delivering = true;
+			reentrantCommits = 0;
+			try {
+				subscriptions.notify();
+			} finally {
+				delivering = false;
+			}
+		}
 		return {
 			success: true,
 			data: next

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peax/consent-core",
-  "version": "0.6.0",
+  "version": "0.9.2",
   "description": "Framework-independent consent state and runtime primitives.",
   "keywords": [
     "consent-management",