Files

Émile Ré e24813202b Fix XSS in cookie banner translation rendering

Validate translation string values server-side with NoHTML() and
MaxLen(2000) to reject HTML in the translations JSON blob. On the
client side, escape user-provided template text before innerHTML
injection in banner_description and placeholder_text paths.

Signed-off-by: Émile Ré <emile@getprobo.com>

2026-04-24 12:18:11 +04:00

src

Fix XSS in cookie banner translation rendering

2026-04-24 12:18:11 +04:00

build.mjs

Rework cookie-banner exports: themed banner as default, headless as subpath

2026-04-22 11:34:50 +04:00

LICENSE

Add @probo/cookie-banner SDK package scaffold

2026-04-16 14:56:31 +04:00

package.json

Rework cookie-banner exports: themed banner as default, headless as subpath

2026-04-22 11:34:50 +04:00

README.md

Shrink cookie-banner README and link to docs site

2026-04-22 11:34:51 +04:00

tsconfig.json

Add @probo/cookie-banner SDK package scaffold

2026-04-16 14:56:31 +04:00

README.md

@probo/cookie-banner

A lightweight, GDPR-compliant cookie consent banner for the web. Works with any framework or plain HTML — zero dependencies, powered by Web Components.

Installation

npm install @probo/cookie-banner

Or drop a single <script> tag — no bundler required:

<script
  src="https://unpkg.com/@probo/cookie-banner/dist/cookie-banner.iife.js"
  data-banner-id="YOUR_BANNER_ID"
  data-base-url="BASE_URL"
></script>

Documentation

Full documentation — including theming, headless components, and script blocking — is available at:

https://www.getprobo.com/docs/product/cookie-banner/overview

License

MIT