vendor/onetrust · vendor documented

OneTrust Auto-Blocking puts the domain script ID in the path

OneTrust documents OtAutoBlock.js under /consent/{domain-script-id}/. geolocation.onetrust.com is not this pack.

The ID is a path segment, not a query

A loader that is just /OtAutoBlock.js has no domain script ID.

Codes are stable. A finding in CI, MCP, or the playground lands on the same id.

Field	Required	What it checks	Rule ids	Source
`domain_script_id`	required	It is the OneTrust data domain script ID. OneTrust documents the Auto-Blocking loader as cdn.cookielaw.org/consent/{id}/OtAutoBlock.js. Fix: Copy the Auto-Blocking script from OneTrust Scripts so the path is /consent/{domain-script-id}/OtAutoBlock.js.	`vendor.onetrust.param.domain_script_id.missing` `vendor.onetrust.param.domain_script_id.empty`	docs

pixellint validate url "$ARTIFACT" --rulepack vendor/onetrust

Try this failing payload in the playground. OneTrust Auto-Blocking missing domain script ID.

https://cdn.cookielaw.org/OtAutoBlock.js

cargo install pixellint · npm install pixellint