vendor/baidu · ecosystem evidence

Baidu Tongji collect hits need si

Tongji documents the site ID on hm.js?{siteId} as a nameless query string. Collect hits send that ID as si. The pack contracts hm.gif, not the loader.

What this pack matches

Hosts: hm.baidu.com
Paths: /hm.gif
Vendor docs: tongji.baidu.com/web/help/article?id=174

Rules

Codes are stable. A finding in CI, MCP, or the playground lands on the same id.

Field	Required	What it checks	Rule ids	Source
`si`	required	It is the 32-hex Tongji site ID. Baidu documents that ID on `hm.js?{siteId}`. Collect hits send it as `si`, so this rule is ecosystem evidence. Fix: Set `si` to the 32-character site ID from Tongji code installation.	`vendor.baidu.param.si.missing` `vendor.baidu.param.si.empty` `vendor.baidu.param.si.invalid`	docs

Validate a payload

pixellint validate url "$ARTIFACT" --rulepack vendor/baidu

Try this failing payload in the playground. Baidu Tongji collect missing si.

https://hm.baidu.com/hm.gif?cc=1

cargo install pixellint · npm install pixellint