Changelog

All notable changes to NexusConsent will be documented here.

1.3.1 - 2026-03-05

Fixed

• Google Consent Mode v2 revoke path now explicitly denies all required keys (analytics_storage, ad_storage, ad_user_data, ad_personalization) before page reload.

1.2.0 - February 2026

Added

• Microsoft Clarity Consent API v2 integration
• Clarity added to default analytics block patterns
• Preset Library for quick-add service patterns
• Site Scanner for server-side detection of external scripts/styles
• Empty category hiding in consent UI when no patterns exist
• "Only essential cookies" message when all optional categories are empty
• Per-category "Reset to defaults" actions for pattern fields

Changed

• Pattern defaults now apply only on first install
• Saved empty pattern fields remain empty after save
• Frontend category payload now includes only categories with patterns

1.0.2 - 2025-01-09

Fixed

• Minor bug fixes and stability improvements

1.0.1 - 2025-10-15

Fixed

• Compatibility improvements for Joomla 5.2+
• Cookie path handling edge cases

1.0.0 - 2025-09-01

Initial public release of NexusConsent for Joomla 4.x/5.x.

Added

Consent Categories

• Analytics (Google Analytics, Hotjar, Mixpanel, etc.)
• Marketing (Facebook Pixel, LinkedIn, TikTok, etc.)
• Functional (Google Fonts, Maps, OpenStreetMap)
• Preferences (custom patterns)
• Necessary (always enabled, non-optional)

Consent UI

• Banner or full-screen modal (require-decision mode)
• Light/Dark/Auto theme support
• Custom accent colors
• Repositionable floating "cookie settings" button
• ARIA live regions and keyboard navigation
• Focus trapping in modal mode

Server-Side Blocking

• Blocks scripts, styles, and inline initialisers until consent
• Pattern-based URL matching for third-party services
• Preserves CSP nonces and integrity attributes
• Works with strict Content Security Policy

Google Consent Mode

• Analytics and ad storage defaults to denied
• Instant updates when visitors change choices
• Compatible with Google Tag Manager

Privacy Features

• Consent cookie contains only version, timestamp, UUID, and category map
• IP addresses masked in audit log (IPv4 /24, IPv6 /64)
• Configurable cookie name, path, and lifetime
• Database retention controls with auto-cleanup

Audit Trail

• Optional database logging of consent events
• CSV export for compliance reporting
• Configurable retention period

Developer Features

• onNexusConsentGiven event hook
• onNexusConsentRevoked event hook
• Manual script guarding via data-consent attribute
• Optional TCF v2 stub for ad platform compatibility

Security

• First-party cookie only
• No external dependencies for core functionality
• CSRF protection on consent save endpoint