Consent Manager (IAB TCF 2.2) 2.0.3

[axtona]

TheConsent Manager (IAB TCF 2.2)已提交，现在可免费下载。感谢贡献成员的付出。 @axtona!

GDPR & ePrivacy Compliance Cookie Consent BannerDEB Consent Manager 是一款功能齐全的IAB TCF 2.2内置直接到XenForo的合规同意管理平台(CMP)，无需外部服务，无月费，完全控制。

• []
• TCF 2.2合规- 全部 __tcfapi 实现，包含 TC-String 编解码器[]]*Google Consent Mode v2- 自动集成与Google Ads、Analytics及Tag Manager[]]*三层同意提示框接受/拒绝 + 目的

Read more about this resource...

 

[axtona]

A new update for Consent Manager (IAB TCF 2.2) 2.0.1 is now available for free download. Big thanks to the contribution from our member @axtona !

March 30, 2026

New Features

• IP Anonymization — New setting to control how visitor IP addresses are stored in consent logs. Options: Anonymized (last octet removed, default), Hashed (SHA-256, irreversible), Do not store, or Full IP. Recommended setting for GDPR compliance: Anonymized.
• Privacy Notice on /consent page — Automatic privacy notice explaining what data is collected, how the IP is handled (adapts to the selected setting), and how long data is retained. References...

Read the rest of this update entry...

 

[axtona]

A new update for Consent Manager (IAB TCF 2.2) 2.0.2 is now available for free download. Big thanks to the contribution from our member @axtona !

change log

Security

• Fixed: Public compliance export endpoint was accessible without authentication. The CSV export is now only available to admins with the debConsentAdmin permission.
• Fixed: CSRF protection is now enforced on the consent update endpoint. Previously disabled for all public POST actions, CSRF is now only skipped for fire-and-forget counters (impressions, adblock).
• Fixed: All public POST endpoints (consent update, impression, adblock) now require XMLHttpRequest...

Read the rest of this update entry...

 

[axtona]

A new update for Consent Manager (IAB TCF 2.2) 2.0.3 is now available for free download. Big thanks to the contribution from our member @axtona !

change log

### Bug Fixes
- Fixed consent decisions not being saved after the CSRF hardening introduced in v2.0.2.
The Google Funding Choices tracker now sends XenForo's _xfToken with the consent/update request, so accept, reject, and custom consent actions are stored correctly again.

- Fixed the dashboard validator returning an HTML admin page instead of JSON.
The validator request now explicitly includes _xfResponseType=json and the current XenForo CSRF token.

- Fixed the cookie scanner returning an...

Read the rest of this update entry...