ConsentLab – GDPR Cookie Consent Banner
| 开发者 | consentlab |
|---|---|
| 更新时间 | 2026年8月13日 22:54 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- Customizable cookie consent banner (colors, texts, position) designed in the ConsentLab dashboard
- Native Google Consent Mode v2 — GA4 & Google Ads
- Automatic script blocking by category (analytics, marketing)
- Cookies cleared automatically on consent withdrawal
- Proof-of-consent storage and statistics, hosted in the EU
- Hide the banner for logged-in administrators
- Deferred script loading for performance (no jQuery)
- Free plan available — no credit card required
安装:
- Upload the plugin files to
/wp-content/plugins/consentlab/, or install the plugin through the WordPress plugins screen directly. - Activate the plugin through the 'Plugins' screen in WordPress.
- Go to Settings > ConsentLab.
- Click "Connect with ConsentLab" — sign in (or create a free account), pick the project for this site, and the API key is configured automatically.
屏幕截图:
常见问题:
Do I need a ConsentLab account?
Yes. The banner configuration (design, texts, cookie categories) is managed in the ConsentLab dashboard. A free plan is available — no credit card required.
Where are consent choices stored?
Consent choices are stored on ConsentLab's servers in the European Union, as proof of consent required by GDPR. No personal data such as IP addresses is stored with the consent record.
Does the plugin slow down my site?
No. The banner script is a small file served from a CDN and is deferred by default, so it does not block page rendering.
Can I use the plugin on a staging site?
Yes. Endpoints can be overridden with the CONSENTLAB_API_BASE, CONSENTLAB_CDN_URL and CONSENTLAB_DASHBOARD_URL constants in wp-config.php (see the Environment panel in the plugin settings).
Does the plugin work with a strict Content-Security-Policy (CSP)?
Yes. The widget is enqueued through the standard WordPress script API, so if your CSP plugin adds nonces to script tags (via the wp_script_attributes or script_loader_tag filters), the nonce is applied to the ConsentLab tag automatically — and the widget propagates it to everything it injects. No configuration needed. Full guide: https://consentlab.eu/en/docs/csp
更新日志:
- Security hardening: the Connect redirect is now validated against an allowlist (safe redirect). No functional change.
- Compatibility verified with WordPress 7.1 — no functional change.
- Expanded the plugin description with clearer feature highlights (cookie banner, GDPR/CCPA consent, Consent Mode v2) — no functional change.
- Clearer plugin name and description, and refined tags to help you find it — no functional change.
- One-click "Connect with ConsentLab": sign in, pick your project and the API key is configured automatically — no more copy-paste (secure OAuth Authorization-Code + PKCE flow).
- Manual API key entry is still available as a fallback.
- Live API key validation: the connection is now checked as you type, before saving.
- "Customize banner" now links straight to your project's banner editor.
- Added a confirmation that the banner is live, with a link to view your site.
- Internal: widget asset renamed cookie-cmp.min.js -> consentlab.min.js (brand consistency)
- Renamed plugin slug and text domain to
consentlab(options are migrated automatically). - New settings screen: branded header, live connection status (project name and plan), onboarding for new users, quick links.
- Banner can be hidden for logged-in administrators.
- Endpoints overridable via constants, options or filters (staging support).
- Widget is now loaded through wp_enqueue_script with optional defer strategy.
- Initial release.