@commercetools-frontend/constants - npm Package Compare versions

Comparing version 0.0.0-canary-20250113090953 to 0.0.0-canary-20250120130409

dist/commercetools-frontend-constants.cjs.dev.js

@@ -6,3 +6,3 @@ 'use strict';
 // NOTE: This string will be replaced on build time with the package version.
-var version = "22.38.0";
+var version = "22.38.1";
 
@@ -156,9 +156,21 @@ /**
 };
+const HTTP_SECURITY_HEADER_KEYS = {
+  'Content-Security-Policy': 'Content-Security-Policy',
+  'Referrer-Policy': 'Referrer-Policy',
+  'Permissions-Policy': 'Permissions-Policy',
+  'Strict-Transport-Security': 'Strict-Transport-Security',
+  'X-XSS-Protection': 'X-XSS-Protection',
+  'X-Content-Type-Options': 'X-Content-Type-Options',
+  'X-Frame-Options': 'X-Frame-Options'
+};
 const HTTP_SECURITY_HEADERS = {
-  'Referrer-Policy': 'same-origin',
-  'Permissions-Policy': 'microphone=(), camera=(), payment=(), usb=(), geolocation=()',
-  'Strict-Transport-Security': 'max-age=31536000; includeSubDomains; preload',
-  'X-XSS-Protection': '1; mode=block',
-  'X-Content-Type-Options': 'nosniff',
-  'X-Frame-Options': 'SAMEORIGIN'
+  [HTTP_SECURITY_HEADER_KEYS['Referrer-Policy']]: 'same-origin',
+  [HTTP_SECURITY_HEADER_KEYS['Permissions-Policy']]:
+  // Note: we need to use `(self)` to ensure that Custom Views (rendered within an `<iframe>`)
+  // can inherit the main application permissions policy and override other directives if needed.
+  'microphone=(self), camera=(self), payment=(self), usb=(self), geolocation=(self)',
+  [HTTP_SECURITY_HEADER_KEYS['Strict-Transport-Security']]: 'max-age=31536000; includeSubDomains; preload',
+  [HTTP_SECURITY_HEADER_KEYS['X-XSS-Protection']]: '1; mode=block',
+  [HTTP_SECURITY_HEADER_KEYS['X-Content-Type-Options']]: 'nosniff',
+  [HTTP_SECURITY_HEADER_KEYS['X-Frame-Options']]: 'SAMEORIGIN'
 };
@@ -170,3 +182,4 @@
   CUSTOM_VIEW_INITIALIZATION: 'custom-view-initialization',
-  CUSTOM_VIEW_CLOSE: 'custom-view-close'
+  CUSTOM_VIEW_CLOSE: 'custom-view-close',
+  CUSTOM_VIEW_READY: 'custom-view-ready'
 };
@@ -229,2 +242,3 @@ const CUSTOM_VIEWS_EVENTS_META = {
 exports.HTTP_SECURITY_HEADERS = HTTP_SECURITY_HEADERS;
+exports.HTTP_SECURITY_HEADER_KEYS = HTTP_SECURITY_HEADER_KEYS;
 exports.LOGIN_STRATEGY_DEFAULT = LOGIN_STRATEGY_DEFAULT;
@@ -231,0 +245,0 @@ exports.LOGIN_STRATEGY_OIDC = LOGIN_STRATEGY_OIDC;

dist/commercetools-frontend-constants.cjs.prod.js

@@ -6,3 +6,3 @@ 'use strict';
 // NOTE: This string will be replaced on build time with the package version.
-var version = "22.38.0";
+var version = "22.38.1";
 
@@ -156,9 +156,21 @@ /**
 };
+const HTTP_SECURITY_HEADER_KEYS = {
+  'Content-Security-Policy': 'Content-Security-Policy',
+  'Referrer-Policy': 'Referrer-Policy',
+  'Permissions-Policy': 'Permissions-Policy',
+  'Strict-Transport-Security': 'Strict-Transport-Security',
+  'X-XSS-Protection': 'X-XSS-Protection',
+  'X-Content-Type-Options': 'X-Content-Type-Options',
+  'X-Frame-Options': 'X-Frame-Options'
+};
 const HTTP_SECURITY_HEADERS = {
-  'Referrer-Policy': 'same-origin',
-  'Permissions-Policy': 'microphone=(), camera=(), payment=(), usb=(), geolocation=()',
-  'Strict-Transport-Security': 'max-age=31536000; includeSubDomains; preload',
-  'X-XSS-Protection': '1; mode=block',
-  'X-Content-Type-Options': 'nosniff',
-  'X-Frame-Options': 'SAMEORIGIN'
+  [HTTP_SECURITY_HEADER_KEYS['Referrer-Policy']]: 'same-origin',
+  [HTTP_SECURITY_HEADER_KEYS['Permissions-Policy']]:
+  // Note: we need to use `(self)` to ensure that Custom Views (rendered within an `<iframe>`)
+  // can inherit the main application permissions policy and override other directives if needed.
+  'microphone=(self), camera=(self), payment=(self), usb=(self), geolocation=(self)',
+  [HTTP_SECURITY_HEADER_KEYS['Strict-Transport-Security']]: 'max-age=31536000; includeSubDomains; preload',
+  [HTTP_SECURITY_HEADER_KEYS['X-XSS-Protection']]: '1; mode=block',
+  [HTTP_SECURITY_HEADER_KEYS['X-Content-Type-Options']]: 'nosniff',
+  [HTTP_SECURITY_HEADER_KEYS['X-Frame-Options']]: 'SAMEORIGIN'
 };
@@ -170,3 +182,4 @@
   CUSTOM_VIEW_INITIALIZATION: 'custom-view-initialization',
-  CUSTOM_VIEW_CLOSE: 'custom-view-close'
+  CUSTOM_VIEW_CLOSE: 'custom-view-close',
+  CUSTOM_VIEW_READY: 'custom-view-ready'
 };
@@ -229,2 +242,3 @@ const CUSTOM_VIEWS_EVENTS_META = {
 exports.HTTP_SECURITY_HEADERS = HTTP_SECURITY_HEADERS;
+exports.HTTP_SECURITY_HEADER_KEYS = HTTP_SECURITY_HEADER_KEYS;
 exports.LOGIN_STRATEGY_DEFAULT = LOGIN_STRATEGY_DEFAULT;
@@ -231,0 +245,0 @@ exports.LOGIN_STRATEGY_OIDC = LOGIN_STRATEGY_OIDC;

dist/commercetools-frontend-constants.esm.js

 // NOTE: This string will be replaced on build time with the package version.
-var version = "22.38.0";
+var version = "22.38.1";
 
@@ -151,9 +151,21 @@ /**
 };
+const HTTP_SECURITY_HEADER_KEYS = {
+  'Content-Security-Policy': 'Content-Security-Policy',
+  'Referrer-Policy': 'Referrer-Policy',
+  'Permissions-Policy': 'Permissions-Policy',
+  'Strict-Transport-Security': 'Strict-Transport-Security',
+  'X-XSS-Protection': 'X-XSS-Protection',
+  'X-Content-Type-Options': 'X-Content-Type-Options',
+  'X-Frame-Options': 'X-Frame-Options'
+};
 const HTTP_SECURITY_HEADERS = {
-  'Referrer-Policy': 'same-origin',
-  'Permissions-Policy': 'microphone=(), camera=(), payment=(), usb=(), geolocation=()',
-  'Strict-Transport-Security': 'max-age=31536000; includeSubDomains; preload',
-  'X-XSS-Protection': '1; mode=block',
-  'X-Content-Type-Options': 'nosniff',
-  'X-Frame-Options': 'SAMEORIGIN'
+  [HTTP_SECURITY_HEADER_KEYS['Referrer-Policy']]: 'same-origin',
+  [HTTP_SECURITY_HEADER_KEYS['Permissions-Policy']]:
+  // Note: we need to use `(self)` to ensure that Custom Views (rendered within an `<iframe>`)
+  // can inherit the main application permissions policy and override other directives if needed.
+  'microphone=(self), camera=(self), payment=(self), usb=(self), geolocation=(self)',
+  [HTTP_SECURITY_HEADER_KEYS['Strict-Transport-Security']]: 'max-age=31536000; includeSubDomains; preload',
+  [HTTP_SECURITY_HEADER_KEYS['X-XSS-Protection']]: '1; mode=block',
+  [HTTP_SECURITY_HEADER_KEYS['X-Content-Type-Options']]: 'nosniff',
+  [HTTP_SECURITY_HEADER_KEYS['X-Frame-Options']]: 'SAMEORIGIN'
 };
@@ -165,3 +177,4 @@
   CUSTOM_VIEW_INITIALIZATION: 'custom-view-initialization',
-  CUSTOM_VIEW_CLOSE: 'custom-view-close'
+  CUSTOM_VIEW_CLOSE: 'custom-view-close',
+  CUSTOM_VIEW_READY: 'custom-view-ready'
 };
@@ -215,2 +228,2 @@ const CUSTOM_VIEWS_EVENTS_META = {
 
-export { CUSTOM_VIEWS_EVENTS_META, CUSTOM_VIEWS_EVENTS_NAMES, CUSTOM_VIEW_HOST_ENTRY_POINT_URI_PATH, DOMAINS, ENTRY_POINT_URI_PATH_REGEX, GRAPHQL_TARGETS, HIDE_ALL_PAGE_NOTIFICATIONS, HIDE_LOADING, HTTP_SECURITY_HEADERS, LOGIN_STRATEGY_DEFAULT, LOGIN_STRATEGY_OIDC, LOGIN_STRATEGY_SSO, LOGOUT_REASONS, MC_API_PROXY_TARGETS, NOTIFICATION_DOMAINS, NOTIFICATION_KINDS_GLOBAL, NOTIFICATION_KINDS_PAGE, NOTIFICATION_KINDS_SIDE, NO_VALUE_FALLBACK, ORGANIZATION_GENERAL_ERROR, PERMISSION_GROUP_NAME_REGEX, PORTALS_CONTAINER_ID, PORTALS_CONTAINER_INDENTATION_SIZE, PROJECT_KEY_REGEX, SHOW_LOADING, STATUS_CODES, STORAGE_KEYS, SUPPORTED_HEADERS, SUPPORT_PORTAL_URL, featureToggles as featureFlags, version };
+export { CUSTOM_VIEWS_EVENTS_META, CUSTOM_VIEWS_EVENTS_NAMES, CUSTOM_VIEW_HOST_ENTRY_POINT_URI_PATH, DOMAINS, ENTRY_POINT_URI_PATH_REGEX, GRAPHQL_TARGETS, HIDE_ALL_PAGE_NOTIFICATIONS, HIDE_LOADING, HTTP_SECURITY_HEADERS, HTTP_SECURITY_HEADER_KEYS, LOGIN_STRATEGY_DEFAULT, LOGIN_STRATEGY_OIDC, LOGIN_STRATEGY_SSO, LOGOUT_REASONS, MC_API_PROXY_TARGETS, NOTIFICATION_DOMAINS, NOTIFICATION_KINDS_GLOBAL, NOTIFICATION_KINDS_PAGE, NOTIFICATION_KINDS_SIDE, NO_VALUE_FALLBACK, ORGANIZATION_GENERAL_ERROR, PERMISSION_GROUP_NAME_REGEX, PORTALS_CONTAINER_ID, PORTALS_CONTAINER_INDENTATION_SIZE, PROJECT_KEY_REGEX, SHOW_LOADING, STATUS_CODES, STORAGE_KEYS, SUPPORTED_HEADERS, SUPPORT_PORTAL_URL, featureToggles as featureFlags, version };

dist/declarations/src/constants.d.ts

@@ -254,9 +254,19 @@ import type { TCustomView } from './types/generated/settings';
 };
+export declare const HTTP_SECURITY_HEADER_KEYS: {
+    readonly 'Content-Security-Policy': "Content-Security-Policy";
+    readonly 'Referrer-Policy': "Referrer-Policy";
+    readonly 'Permissions-Policy': "Permissions-Policy";
+    readonly 'Strict-Transport-Security': "Strict-Transport-Security";
+    readonly 'X-XSS-Protection': "X-XSS-Protection";
+    readonly 'X-Content-Type-Options': "X-Content-Type-Options";
+    readonly 'X-Frame-Options': "X-Frame-Options";
+};
+export type THttpSecurityHeaders = keyof typeof HTTP_SECURITY_HEADER_KEYS;
 export declare const HTTP_SECURITY_HEADERS: {
-    readonly 'Referrer-Policy': "same-origin";
-    readonly 'Permissions-Policy': "microphone=(), camera=(), payment=(), usb=(), geolocation=()";
-    readonly 'Strict-Transport-Security': "max-age=31536000; includeSubDomains; preload";
-    readonly 'X-XSS-Protection': "1; mode=block";
-    readonly 'X-Content-Type-Options': "nosniff";
-    readonly 'X-Frame-Options': "SAMEORIGIN";
+    readonly "Referrer-Policy": "same-origin";
+    readonly "Permissions-Policy": "microphone=(self), camera=(self), payment=(self), usb=(self), geolocation=(self)";
+    readonly "Strict-Transport-Security": "max-age=31536000; includeSubDomains; preload";
+    readonly "X-XSS-Protection": "1; mode=block";
+    readonly "X-Content-Type-Options": "nosniff";
+    readonly "X-Frame-Options": "SAMEORIGIN";
 };
@@ -267,2 +277,3 @@ export declare const CUSTOM_VIEWS_EVENTS_NAMES: {
     CUSTOM_VIEW_CLOSE: string;
+    CUSTOM_VIEW_READY: string;
 };
@@ -269,0 +280,0 @@ export declare const CUSTOM_VIEWS_EVENTS_META: {

package.json

 {
   "name": "@commercetools-frontend/constants",
-  "version": "0.0.0-canary-20250113090953",
+  "version": "0.0.0-canary-20250120130409",
   "description": "Shared constants for MC applications",
@@ -5,0 +5,0 @@ "bugs": "https://github.com/commercetools/merchant-center-application-kit/issues",

No alert changes

Improved metrics

Total package byte prevSize

109247

increased by2.99%

Lines of code

2653

increased by2%

No dependency changes