Didomi loaders put the Public API Key in the path
Didomi documents the loader as /{Public API Key}/loader.js. api.privacy-center.org events are not this pack.
The API key is a path segment
A loader that is just /loader.js has no Public API Key.
What this pack matches
Rules
Codes are stable. A finding in CI, MCP, or the playground lands on the same id.
| Field | Required | What it checks | Rule ids | Source |
|---|---|---|---|---|
api_key |
required | It is the Didomi Public API Key. Didomi documents the loader as sdk.privacy-center.org/{Public API Key}/loader.js. Fix: Copy the embed from Didomi Console so the path is /{Public API Key}/loader.js. | vendor.didomi.param.api_key.missingvendor.didomi.param.api_key.empty |
docs |
country |
optional | Didomi loader overrides use an ISO 3166-1 alpha-2 country code. | vendor.didomi.param.country.emptyvendor.didomi.param.country.invalid |
docs |
region |
optional | Didomi uses the country subdivision code on loader requests. | vendor.didomi.param.region.empty |
docs |
target_type |
optional | Didomi documents notice as the consent-notice loader target type. | vendor.didomi.param.target_type.empty |
docs |
target |
optional | Didomi documents target as the consent notice identifier. | vendor.didomi.param.target.empty |
docs |
notice_target_required |
required | A consent notice target requires its notice identifier. | vendor.didomi.notice_target_required |
docs |
Validate a payload
pixellint validate url "$ARTIFACT" --rulepack vendor/didomiTry this failing payload in the playground. Didomi loader missing Public API Key.
https://sdk.privacy-center.org/loader.js
cargo install pixellint
·
npm install pixellint