pixellint

vendor/cookiebot-declaration · vendor template

Cookiebot declarations put the domain group ID in the path

Cookiebot's published declaration snippet loads /{cbid}/cd.js. The banner loader is vendor/cookiebot.

The path segment is the domain group UUID

A declaration URL without a UUID in the path is not the Cookiebot declaration snippet.

Rule: vendor.cookiebot-declaration.param.cbid.invalid

What this pack matches

Hosts
consent.cookiebot.com
Paths
…/cd.js…
Vendor docs
support.cookiebot.com/hc/en-us/articles/10714664673564-Manually-implementing-Cookiebot-CMP-Cookiebot-Admin

Rules

Codes are stable. A finding in CI, MCP, or the playground lands on the same id.

Field Required What it checks Rule ids Source
cbid required It is the Cookiebot domain group ID. Cookiebot's published declaration snippet loads /{cbid}/cd.js. Fix: Copy the Cookie Declaration snippet from Cookiebot so the path is /{cbid}/cd.js. vendor.cookiebot-declaration.param.cbid.missing
vendor.cookiebot-declaration.param.cbid.empty
vendor.cookiebot-declaration.param.cbid.invalid
docs

Validate a payload

pixellint validate url "$ARTIFACT" --rulepack vendor/cookiebot-declaration

Try this failing payload in the playground. Cookiebot declaration with a non-UUID path.

https://consent.cookiebot.com/not-a-uuid/cd.js

cargo install pixellint · npm install pixellint