vendor/taboola · vendor documented

Taboola Pixel loaders put the account ID in the path

Taboola documents the base pixel as cdn.taboola.com/libtrc/unip/<account_id>/tfa.js. The number is the Realize Account ID. Collection on trc.taboola.com is attributed, not contracted.

What this pack matches

Hosts: cdn.taboola.com
Paths: …/libtrc/unip/…
Vendor docs: developers.taboola.com/pixel/docs/add-the-base-pixel-manually

Rules

Codes are stable. A finding in CI, MCP, or the playground lands on the same id.

Field	Required	What it checks	Rule ids	Source
`account_id`	required	It is the numeric Taboola Account ID. Taboola documents the loader as `cdn.taboola.com/libtrc/unip/<account_id>/tfa.js`. Fix: Replace `<account_id>` with the numeric Account ID from Realize Tracking.	`vendor.taboola.param.account_id.missing` `vendor.taboola.param.account_id.empty` `vendor.taboola.param.account_id.invalid`	docs

Validate a payload

pixellint validate url "$ARTIFACT" --rulepack vendor/taboola

Try this failing payload in the playground. Taboola Pixel loader missing account ID.

https://cdn.taboola.com/libtrc/unip/tfa.js

cargo install pixellint · npm install pixellint