vendor/oracle-bluekai · vendor documented

BlueKai site tags put the site ID in the path

Oracle documents the ID swap tag as stags.bluekai.com/site/{YOUR_SITE_ID}. The JS Return tag uses the same path on tags.bluekai.com. Email oHashes go in e_id_s as SHA-256, not as raw email.

The site ID is an integer path segment

A /site/ URL with a non-numeric site ID is not a BlueKai container tag.

Rule: vendor.oracle-bluekai.param.site_id.invalid

What this pack matches

Hosts: tags.bluekai.com, stags.bluekai.com
Paths: /site/
Vendor docs: docs.oracle.com/en/cloud/saas/data-cloud/data-cloud-help-center/IntegratingBlueKaiPlatform/IDManagement/sending_ohashes.html

Rules

Codes are stable. A finding in CI, MCP, or the playground lands on the same id.

Field	Required	What it checks	Rule ids	Source
`site_id`	required	It is the BlueKai site ID. Oracle documents the ID swap tag as stags.bluekai.com/site/{YOUR_SITE_ID}. Fix: Copy the container site ID from BlueKai so the path is /site/{siteId}.	`vendor.oracle-bluekai.param.site_id.missing` `vendor.oracle-bluekai.param.site_id.empty` `vendor.oracle-bluekai.param.site_id.invalid`	docs
`e_id_s`	optional	It is a SHA-256 oHash for email. Oracle documents that no personally identifiable information may be sent; IDs derived from PII must be hashed first. Fix: Hash the email with SHA-256 and send the digest as e_id_s.	`vendor.oracle-bluekai.param.e_id_s.empty` `vendor.oracle-bluekai.param.e_id_s.invalid`	docs
`unhashed_email`	required	A parameter carries what looks like a raw email address. Oracle documents oHashes as SHA-256 digests and forbids sending personally identifiable information. Fix: Hash the email with SHA-256 and send it as e_id_s.	`vendor.oracle-bluekai.unhashed_email`	docs

Validate a payload

pixellint validate url "$ARTIFACT" --rulepack vendor/oracle-bluekai

Try this failing payload in the playground. BlueKai site tag with a non-numeric site ID.

https://stags.bluekai.com/site/not-a-number

cargo install pixellint · npm install pixellint