vendor/cookiebot · vendor documented

Cookiebot banners need a domain group ID

Cookiebot documents uc.js?cbid= as one install. The other install puts the UUID in data-cbid, not the query. The Cookie Declaration on /{cbid}/cd.js is vendor/cookiebot-declaration.

cbid is a UUID

Cookiebot documents the domain group ID as a UUID. A query install with a non-UUID cbid is not a banner.

Rule: vendor.cookiebot.param.cbid.invalid

What this pack matches

Hosts: consent.cookiebot.com
Paths: …uc.js…
Vendor docs: www.cookiebot.com/en/developer/

Rules

Codes are stable. A finding in CI, MCP, or the playground lands on the same id.

Field	Required	What it checks	Rule ids	Source
`cbid`	recommended	It is the Cookiebot domain group ID. Cookiebot documents uc.js?cbid= as one install. The other install puts the same UUID in data-cbid, not the query. Fix: For a query install, put the domain group ID on the URL as cbid=. For a tag-attribute install, data-cbid carries it instead.	`vendor.cookiebot.param.cbid.missing` `vendor.cookiebot.param.cbid.empty` `vendor.cookiebot.param.cbid.invalid`	docs

Validate a payload

pixellint validate url "$ARTIFACT" --rulepack vendor/cookiebot

Try this failing payload in the playground. Cookiebot banner with a non-UUID cbid.

https://consent.cookiebot.com/uc.js?cbid=not-a-uuid

cargo install pixellint · npm install pixellint