pixellint

vendor/didomi · vendor documented

Didomi loaders put the Public API Key in the path

Didomi documents the loader as /{Public API Key}/loader.js. api.privacy-center.org events are not this pack.

The API key is a path segment

A loader that is just /loader.js has no Public API Key.

Rule: vendor.didomi.param.api_key.missing

What this pack matches

Hosts
sdk.privacy-center.org
Paths
…loader.js…
Vendor docs
developers.didomi.io/api-and-platform/domains/reverse-proxy

Rules

Codes are stable. A finding in CI, MCP, or the playground lands on the same id.

Field Required What it checks Rule ids Source
api_key required It is the Didomi Public API Key. Didomi documents the loader as sdk.privacy-center.org/{Public API Key}/loader.js. Fix: Copy the embed from Didomi Console so the path is /{Public API Key}/loader.js. vendor.didomi.param.api_key.missing
vendor.didomi.param.api_key.empty		 docs

Validate a payload

pixellint validate url "$ARTIFACT" --rulepack vendor/didomi

Try this failing payload in the playground. Didomi loader missing Public API Key.

https://sdk.privacy-center.org/loader.js

cargo install pixellint · npm install pixellint