v0.4.5-beta

0xSojalSec/airllmv0.4.5-betaFeb 15, 2026by southwellmedia

AI Summary

This release introduces a new Cookie Consent Manager with Google Consent Mode v2, updates security configurations, and resolves several UI and logic bugs.

Key Highlights

New Cookie Consent Manager with Google Consent Mode v2 integration.
Removed Astro CSP, which breaks inline styles.
Simplified security headers and CSRF protection.
Fixed mobile menu backdrop blur and race condition bugs.

Breaking Changes

Removed Astro CSP, causing inline styles to break.

New Features

Cookie Consent Manager with Accept All / Decline All / Customize options.
Google Consent Mode v2 integration for analytics and marketing.
Reopener button functionality after consent is saved.
Configuration via `consent.config.ts` for categories and UI text.
Toggle functionality via `PUBLIC_CONSENT_ENABLED` environment variable.

Full Release Notes

## What's New

### Cookie Consent Manager with Google Consent Mode v2
- Full consent banner with Accept All / Decline All / Customize options
- Settings panel via Dialog component with per-category toggles
- Google Consent Mode v2 integration (analytics, marketing, preferences)
- Supports both `consent_mode_v2` and `strict` blocking modes
- Configurable via `consent.config.ts` — categories, UI text, delay
- Reopener button after consent is saved
- `PUBLIC_CONSENT_ENABLED` env var to toggle on/off

### Security
- Removed Astro CSP (auto-hashes `<style>` blocks, breaking inline styles — revisit when stable)
- Kept `checkOrigin: true` for CSRF protection
- Simplified security headers via `vercel.json` (clickjacking, MIME sniffing, referrer, permissions)
- Dropped deprecated `X-XSS-Protection` header

### Fixes
- Fixed mobile menu backdrop blur not applying (scoped style → global)
- Fixed lint errors in Analytics and ConsentBanner
- Fixed dynamic consent mapping and race condition bugs