What's Changed
- Fix the HotJar preset for the Hotjar-to-Contentsquare migration by allowing https://*.hotjar.io for scripts and images. Existing connection, WebSocket and .com permissions are preserved; no new frame, font or style permissions are added.
- Add regression coverage for standalone HotJar policies and policies combined with the Basic preset.
- Use the Spatie-hosted README ad image.
No API, dependency requirement or supported-version changes. Applications that explicitly define script-src-elem must also add https://*.hotjar.io there; otherwise script elements inherit script-src as before. See Hotjar's migration FAQ.
Thanks to @jackbayliss for the contribution in #228.
Full Changelog: 3.30.0...3.30.1