ShareASale legacy pixels check archived sale and lead fields.

Warning-only checks for the archived official sale.cfm image template for per-sale and per-lead programs. The document is historical; current collector support after migration is unverified. PPC programs, the separately approved q.cfm socket method, extensions, account permissions and delivery are outside this profile.

What this pack matches

Hosts: shareasale.com
Paths: /sale.cfm
Vendor docs: web.archive.org/web/20100820151718id_/http://www.shareasale.com:80/step3.pdf

Rules

Codes are stable. A finding in CI, MCP, or the playground lands on the same id.

Field	Required	What it checks	Rule ids	Source
`amount`	recommended	The legacy template supplies the sale subtotal. Lead also supplies amount, including the documented 0.00 example. No sign or precision constraint is inferred. Presence diagnostic severity: warning. Value diagnostic severity: warning.	`vendor.shareasale-legacy.param.amount.missing` `vendor.shareasale-legacy.param.amount.empty` `vendor.shareasale-legacy.param.amount.invalid`	docs
`tracking`	recommended	The legacy order or lead identifier is opaque and may contain email-like text. No issued-ID, numeric or UUID grammar is imposed. Presence diagnostic severity: warning. Value diagnostic severity: warning.	`vendor.shareasale-legacy.param.tracking.missing` `vendor.shareasale-legacy.param.tracking.empty`	docs
`merchantID`	recommended	The template supplies the merchant identifier. Issuance, numeric spelling, length and account state remain external. Presence diagnostic severity: warning. Value diagnostic severity: warning.	`vendor.shareasale-legacy.param.merchantID.missing` `vendor.shareasale-legacy.param.merchantID.empty`	docs
`transtype`	recommended	These are the two program types in this explicitly legacy sale/lead image-template profile. Other protocols are not covered. Presence diagnostic severity: warning. Value diagnostic severity: warning.	`vendor.shareasale-legacy.param.transtype.missing` `vendor.shareasale-legacy.param.transtype.empty` `vendor.shareasale-legacy.param.transtype.invalid`	docs
`method`	recommended	The historical image producer uses GET. This does not describe the separately approved socket endpoint. Complete HTTP capture contract. Presence diagnostic severity: warning. Value diagnostic severity: warning.	`vendor.shareasale-legacy.http.method.missing` `vendor.shareasale-legacy.http.method.empty` `vendor.shareasale-legacy.http.method.invalid`	docs

Validate a payload

pixellint validate url "$ARTIFACT" --rulepack vendor/shareasale-legacy

Try this failing payload in the playground. An example with a validation finding.

https://shareasale.com/sale.cfm?amount=14.95&tracking=synthetic-order&transtype=sale

cargo install pixellint · npm install pixellint