@projektemacher/storymapjs 0.10.7 → 0.10.8

package/dist/index.html

@@ -8,7 +8,7 @@
             name="description"
             content="Maps that tell stories. StoryMapJS is a viewer for place-based slide stories, built on OpenLayers."
         />
-      <script type="module" crossorigin src="./assets/index-DDsPBPZA.js"></script>
+      <script type="module" crossorigin src="./assets/index-wHPqGrBS.js"></script>
       <link rel="modulepreload" crossorigin href="./assets/modulepreload-polyfill-P2Xu9kJm.js">
         <link rel="stylesheet" href="./site.css" />
     </head>
@@ -343,8 +343,11 @@ new StoryMap("mapdiv", "my-storymap.json");</code></pre>
                                         Yes — the slide <code>text</code> renders as HTML: links,
                                         images, lists and <code>vco-note</code> spans all work. Text
                                         without a <code>&lt;p&gt;</code>
-                                        tag is wrapped in one automatically. The markup is rendered
-                                        raw, so only load storymaps from sources you trust.
+                                        tag is wrapped in one automatically. The markup is sanitized
+                                        first: formatting survives, scripts and event handlers are
+                                        dropped, URLs are checked to be web URLs, and pasted
+                                        <code>&lt;iframe&gt;</code> embeds are rebuilt sandboxed.
+                                        Still, only load storymaps from sources you trust.
                                     </p>
                                 </div>
                             </li>
@@ -357,9 +360,9 @@ new StoryMap("mapdiv", "my-storymap.json");</code></pre>
                                     <code>map_bbox: [west, south, east, north]</code>
                                     (lon/lat) in the options — the view center is constrained to the
                                     box, so the map cannot pan away from it. For IIIF image stories
-                                    the coordinates are raw image pixels. To also limit the map to the
-                                    left, visible area (opaque slide panel, no gradient over the map),
-                                    set <code>map_area: "left"</code>.
+                                    the coordinates are raw image pixels. To also limit the map to
+                                    the left, visible area (opaque slide panel, no gradient over the
+                                    map), set <code>map_area: "left"</code>.
                                 </div>
                             </li>
                             <li>
@@ -371,10 +374,13 @@ new StoryMap("mapdiv", "my-storymap.json");</code></pre>
                                         Yes, but set
                                         <code>consent_required: true</code> to ask for permission
                                         before anything is loaded from external services (media
-                                        embeds, map tiles, external fonts). Each service asks once
-                                        per page load with an Allow/Deny panel; denied services show
-                                        a placeholder instead. Decisions are stored in a cookie for
-                                        90 days — clearing cookies asks again.
+                                        embeds, map tiles, external fonts). One dialog lists every
+                                        service the story uses and offers
+                                        <strong>allow all</strong>, <strong>decline all</strong> or
+                                        a decision per service; services discovered later still ask
+                                        on their slide. Denied services show a placeholder instead.
+                                        Decisions are stored in your browser's local storage —
+                                        clearing site data asks again.
                                     </p>
                                 </div>
                             </li>