Update to version 1.19.0 of tarteaucitron library.

Author: jenlampton

js/tarteaucitron/.github/FUNDING.yml

@@ -0,0 +1,3 @@
+# These are supported funding model platforms
+
+github: AmauriC

js/tarteaucitron/.github/stale.yml

@@ -0,0 +1,18 @@
+# Number of days of inactivity before an issue becomes stale
+daysUntilStale: 20
+# Number of days of inactivity before a stale issue is closed
+daysUntilClose: 5
+# Issues with these labels will never be considered stale
+exemptLabels:
+  - pinned
+  - security
+  - active
+# Label to use when marking an issue as stale
+staleLabel: inactive
+# Comment to post when marking an issue as stale. Set to `false` to disable
+markComment: >
+  This issue has been automatically marked as inactive because it has not had
+  activity for 20 days. It will be closed in 5 days if no further activity occurs.
+  Thank you for your contributions.
+# Comment to post when closing a stale issue. Set to `false` to disable
+closeComment: false

js/tarteaucitron/.github/workflows/codeql-analysis.yml

@@ -0,0 +1,67 @@
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+#
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+#
+# ******** NOTE ********
+# We have attempted to detect the languages in your repository. Please check
+# the `language` matrix defined below to confirm you have the correct set of
+# supported CodeQL languages.
+#
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ master ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ master ]
+  schedule:
+    - cron: '23 21 * * 2'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'javascript' ]
+        # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ]
+        # Learn more:
+        # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v2
+      with:
+        languages: ${{ matrix.language }}
+        # If you wish to specify custom queries, you can do so here or in a config file.
+        # By default, queries listed here will override any specified in a config file.
+        # Prefix the list here with "+" to use these queries and those in the config file.
+        # queries: ./path/to/local/query, your-org/your-repo/queries@main
+
+    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+    # If this step fails, then you should remove it and run the build manually (see below)
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v1
+
+    # ℹ️ Command-line programs to run using the OS shell.
+    # 📚 https://git.io/JvXDl
+
+    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
+    #    and modify them (or add more) to build your code if your project
+    #    uses a compiled language
+
+    #- run: |
+    #   make bootstrap
+    #   make release
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v2

js/tarteaucitron/.gitignore

@@ -0,0 +1,2 @@
+.idea
+.DS_Store

js/tarteaucitron/README.md

@@ -1,71 +1,90 @@
-[![](https://data.jsdelivr.com/v1/package/gh/AmauriC/tarteaucitron.js/badge)](https://www.jsdelivr.com/package/gh/AmauriC/tarteaucitron.js)
-[![npm](https://img.shields.io/npm/v/tarteaucitronjs.svg)](https://www.npmjs.com/package/tarteaucitronjs) [![GitHub contributors](https://img.shields.io/github/contributors/AmauriC/tarteaucitron.js.svg)](https://github.com/AmauriC/tarteaucitron.js/graphs/contributors)
 
-tarteaucitron.js
-================
-Comply to the european cookie law is simple with the french *tarte au citron*.
+[![](https://data.jsdelivr.com/v1/package/npm/tarteaucitronjs/badge)](https://www.jsdelivr.com/package/npm/tarteaucitronjs)
+[![npm](https://img.shields.io/npm/v/tarteaucitronjs.svg)](https://www.npmjs.com/package/tarteaucitronjs) [![GitHub contributors](https://img.shields.io/github/contributors/AmauriC/tarteaucitron.js.svg)](https://github.com/AmauriC/tarteaucitron.js/graphs/contributors) [![Sponsor](https://img.shields.io/static/v1?label=Sponsor&message=%E2%9D%A4&logo=GitHub)](https://github.com/sponsors/AmauriC) 
+
+
+![alt text](https://tarteaucitron.io/tarteaucitron.png "tarteaucitron.io")
+
+👋 Hey, I'm Amauri, a french dev that build a GDPR friendly cookie manager.
+
+tarteaucitron was initially a simple script for my personal blog (in 2013), a few months later, the Github repository is opened and tarteaucitron is now reliable and recognized.
 
-# What is this script?
 The european cookie law regulates the management of cookies and you should ask your visitors their consent before exposing them to third party services.
 
 Clearly this script will:
 - Disable all services by default,
 - Display a banner on the first page view and a small one on other pages,
 - Display a panel to allow or deny each services one by one,
-- Activate services on the second page view if not denied,
 - Store the consent in a cookie for 365 days.
 
 Bonus:
 - Load service when user click on Allow (without reload of the page),
 - Incorporate a fallback system (display a link instead of social button and a static banner instead of advertising).
 
 
-# Installation guide
-[Visit tarteaucitron.io](https://tarteaucitron.io/)
-
 
 # How to use
 
 ```html
-<script type="text/javascript" src="/tarteaucitron/tarteaucitron.js"></script>
+<script src="/tarteaucitron/tarteaucitron.js"></script>
 
-<script type="text/javascript">
+<script>
 tarteaucitron.init({
     "privacyUrl": "", /* Privacy policy url */
+    "bodyPosition": "bottom", /* or top to bring it as first element for accessibility */
 
     "hashtag": "#tarteaucitron", /* Open the panel with this hashtag */
     "cookieName": "tarteaucitron", /* Cookie name */
 
-    "orientation": "middle", /* Banner position (top - bottom) */
+    "orientation": "middle", /* Banner position (top - bottom - middle - popup) */
+
+    "groupServices": false, /* Group services by category */
+    "showDetailsOnClick": true, /* Click to expand the description */
+    "serviceDefaultState": "wait", /* Default state (true - wait - false) */
 
     "showAlertSmall": false, /* Show the small banner on bottom right */
     "cookieslist": false, /* Show the cookie list */
     
     "showIcon": true, /* Show cookie icon to manage cookies */
+    // "iconSrc": "", /* Optional: URL or base64 encoded image */
     "iconPosition": "BottomRight", /* Position of the icon between BottomRight, BottomLeft, TopRight and TopLeft */
 
     "adblocker": false, /* Show a Warning if an adblocker is detected */
 
     "DenyAllCta" : true, /* Show the deny all button */
     "AcceptAllCta" : true, /* Show the accept all button when highPrivacy on */
     "highPrivacy": true, /* HIGHLY RECOMMANDED Disable auto consent */
-
+    "alwaysNeedConsent": false, /* Ask the consent for "Privacy by design" services */
+    
     "handleBrowserDNTRequest": false, /* If Do Not Track == 1, disallow all */
 
     "removeCredit": false, /* Remove credit link */
     "moreInfoLink": true, /* Show more info link */
     "useExternalCss": false, /* If false, the tarteaucitron.css file will be loaded */
+    "useExternalJs": false, /* If false, the tarteaucitron.services.js file will be loaded */
 
-    //"cookieDomain": ".my-multisite-domaine.fr", /* Shared cookie for subdomain website */
+    // "cookieDomain": ".my-multisite-domaine.fr", /* Shared cookie for subdomain website */
 
     "readmoreLink": "", /* Change the default readmore link pointing to tarteaucitron.io */
     
-    "mandatory": true /* Show a message about mandatory cookies */
+    "mandatory": true, /* Show a message about mandatory cookies */
+    "mandatoryCta": true, /* Show the disabled accept button when mandatory on */
+    
+    // "customCloserId": "", /* Optional a11y: Custom element ID used to open the panel */
+
+    "googleConsentMode": true, /* Enable Google Consent Mode v2 for Google ads and GA4 */
+    
+    "partnersList": false /* Details the number of partners on the popup and middle banner */
 });
 </script>
 ```
 
-# Create custom service
+# Add a service
+[Visit tarteaucitron.io](https://tarteaucitron.io/en/install/)
+
+# Customization
+
+## Create custom service
 ```js
 tarteaucitron.services.mycustomservice = {
   "key": "mycustomservice",
@@ -84,3 +103,57 @@ tarteaucitron.services.mycustomservice = {
   }
 };
 ```
+
+## Events
+
+The following events are available:
+* (document) `{SERVICE_KEY}_added` for each enabled service
+* (document) `{SERVICE_KEY}_loaded` for each enabled service
+* (document) `{SERVICE_KEY}_allowed` for each service when allowed
+* (document) `{SERVICE_KEY}_disallowed ` for each service when disallowed
+
+* (window) `tac.root_available`: the root element with panel has been created, services will be loaded
+* (window) `tac.open_alert`
+* (window) `tac.close_alert`
+* (window) `tac.open_panel`
+* (window) `tac.close_panel`
+
+## Customize text
+
+To change a translation, use `tarteaucitronCustomText` variable. It will be merge with the translation shipping with TAC. This variable must be defined before the initialization. For example:
+```js
+tarteaucitronCustomText = {
+  'support': {
+    'title': 'Support client',
+  },
+  'close': 'Enregistrer et fermer',
+};
+tarteaucitron.init(...);
+```
+
+There is a special case for engagement text. By the default, the engagement text is  _{SERVICE_NAME} is disabled._, however you can change it per service. For example:
+```js
+tarteaucitronCustomText = {
+  'engage-twitter': 'Follow us on Twitter!'
+};
+```
+
+# Thanks to the sponsors 😊
+
+| ![Amaury Cleuziou](https://avatars.githubusercontent.com/u/26336203?v=4&s=60) |  |   |
+|---|---|---|
+|  [Amaury Cleuziou](https://github.com/MoryCorp) - first sponsor 🎉 |  |  |
+| |   |   |
+
+
+# 600M on the pro version
+
+Every month, hundreds of millions of cookies 🍪 are placed after the user's consent or simply refused.
+
+[![jsdelivr](https://tarteaucitron.io/jsdelivr.png)](https://www.jsdelivr.com/package/gh/AmauriC/tarteaucitron.js)
+
+# Used by all type of website 
+
+Tarteaucitron has been around for years and is now used by thousands of companies, government sites, web agencies, ... 🦾
+
+[![Builtwith](https://tarteaucitron.io/builtwith.png)](https://trends.builtwith.com/widgets/tarteaucitron.js)

js/tarteaucitron/SECURITY.md

@@ -0,0 +1,14 @@
+# Security Policy
+
+## Supported Versions
+
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 1.x   | :white_check_mark: |
+
+
+## Reporting a Vulnerability
+
+Please report any security vulnerabilities to amauri@tarteaucitron.io
+I'll get back to you within 24 hours and fix the issue asap.

js/tarteaucitron/advertising.js

@@ -1 +1,2 @@
+/* min ready */
 tarteaucitronNoAdBlocker = true;

js/tarteaucitron/advertising.min.js

@@ -0,0 +1 @@
+tarteaucitronNoAdBlocker=true;