Pop semvar up

package.json

@@ -1,6 +1,6 @@
 {
     "name": "mifi-ventures-landing",
-    "version": "4.0.2",
+    "version": "4.0.3",
     "private": true,
     "repository": "https://git.mifi.dev/mifi-ventures/landing.git",
     "packageManager": "pnpm@10.31.0+sha512.e3927388bfaa8078ceb79b748ffc1e8274e84d75163e67bc22e06c0d3aed43dd153151cbf11d7f8301ff4acb98c68bdc5cadf6989532801ffafe3b3e4a63c268",

static/assets/js/cookie-consent.js

@@ -12,6 +12,8 @@
     var hasLoadedThirdParty = false;
 
     // Trusted Types support (for CSP `require-trusted-types-for 'script'`)
+    // Clarity's tag script looks up window.trustedTypePolicies[policyName] to load its inner script;
+    // we must expose the policy there for Safari (and other browsers) to avoid TT violations.
     var ttPolicy = null;
     try {
         if (
@@ -23,6 +25,14 @@
                     return url;
                 },
             });
+
+            if (ttPolicy && !window.trustedTypePolicies) {
+                window.trustedTypePolicies = {};
+            }
+
+            if (ttPolicy) {
+                window.trustedTypePolicies['mifi-ventures-policy'] = ttPolicy;
+            }
         }
     } catch (_) {
         ttPolicy = null;
@@ -76,7 +86,10 @@
                     };
                 t = l.createElement(r);
                 t.async = 1;
-                setScriptSrc(t, 'https://www.clarity.ms/tag/' + i);
+                setScriptSrc(
+                    t,
+                    `https://www.clarity.ms/tag/${i}?trustedTypes=mifi-ventures-policy`,
+                );
                 y = l.getElementsByTagName(r)[0];
                 y.parentNode.insertBefore(t, y);
             })(window, document, 'clarity', 'script', 'vuo5q3yf79');