Weborama impressions check the WCM tutorial template.
Warning-only producer profile for the exact tutorial host named in the official guide, /fcgi-bin/dispatch.fcgi and literal im/js markers. Other actions, loaders and the Russian host remain uncontracted.
What this pack matches
Rules
Codes are stable. A finding in CI, MCP, or the playground lands on the same id.
| Field | Required | What it checks | Rule ids | Source |
|---|---|---|---|---|
a.A |
optional | Impression marker required by this source-profile selector. Presence diagnostic severity: warning. | vendor.weborama-wcm-js-impression.param.a.A.emptyvendor.weborama-wcm-js-impression.param.a.A.invalid |
docs |
a.hr |
optional | JS response marker required by this source-profile selector. Presence diagnostic severity: warning. | vendor.weborama-wcm-js-impression.param.a.hr.emptyvendor.weborama-wcm-js-impression.param.a.hr.invalid |
docs |
a.si |
recommended | Source account_id is concatenated without native numeric validation. Presence is a producer advisory; empty values and opaque types remain allowed. Presence diagnostic severity: warning. | vendor.weborama-wcm-js-impression.param.a.si.missing |
docs |
a.te |
recommended | Source tracking_element_id is concatenated without native numeric validation. Presence is a producer advisory; empty values and opaque types remain allowed. Presence diagnostic severity: warning. | vendor.weborama-wcm-js-impression.param.a.te.missing |
docs |
a.ra |
recommended | Source random placeholder value. Presence is a producer advisory; empty values and opaque types remain allowed. Presence diagnostic severity: warning. | vendor.weborama-wcm-js-impression.param.a.ra.missing |
docs |
a.agi |
recommended | Source action-group value. Presence is a producer advisory; empty values and opaque types remain allowed. Presence diagnostic severity: warning. | vendor.weborama-wcm-js-impression.param.a.agi.missing |
docs |
ca |
recommended | Source cache-buster value. Presence is a producer advisory; empty values and opaque types remain allowed. Presence diagnostic severity: warning. | vendor.weborama-wcm-js-impression.param.ca.missing |
docs |
a.wi |
recommended | Source width placeholder. Presence is a producer advisory; empty values and opaque types remain allowed. Presence diagnostic severity: warning. | vendor.weborama-wcm-js-impression.param.a.wi.missing |
docs |
a.he |
recommended | Source height placeholder. Presence is a producer advisory; empty values and opaque types remain allowed. Presence diagnostic severity: warning. | vendor.weborama-wcm-js-impression.param.a.he.missing |
docs |
a.sh |
recommended | Source screen-height placeholder. Presence is a producer advisory; empty values and opaque types remain allowed. Presence diagnostic severity: warning. | vendor.weborama-wcm-js-impression.param.a.sh.missing |
docs |
a.sw |
recommended | Source screen-width placeholder. Presence is a producer advisory; empty values and opaque types remain allowed. Presence diagnostic severity: warning. | vendor.weborama-wcm-js-impression.param.a.sw.missing |
docs |
g.de |
recommended | The producer appends a Boolean-derived 0 or 1. Unescaped account or tracking identifiers can introduce arbitrary or empty repeated values; only presence is advised, with no receiver duplicate-selection policy inferred. Presence diagnostic severity: warning. | vendor.weborama-wcm-js-impression.param.g.de.missing |
docs |
g.ism |
recommended | The producer appends a Boolean-derived 0 or 1. Unescaped account or tracking identifiers can introduce arbitrary or empty repeated values; only presence is advised, with no receiver duplicate-selection policy inferred. Presence diagnostic severity: warning. | vendor.weborama-wcm-js-impression.param.g.ism.missing |
docs |
a.we |
recommended | The producer appends a Boolean-derived 0 or 1. Unescaped account or tracking identifiers can introduce arbitrary or empty repeated values; only presence is advised, with no receiver duplicate-selection policy inferred. Presence diagnostic severity: warning. | vendor.weborama-wcm-js-impression.param.a.we.missing |
docs |
g.pn |
optional | Optional source field or branch value. No receiver-wide presence, numeric bound, URL shape or account-state constraint is inferred. Presence diagnostic severity: warning. | docs | |
g.puid |
optional | Optional source field or branch value. No receiver-wide presence, numeric bound, URL shape or account-state constraint is inferred. Presence diagnostic severity: warning. | docs | |
a.ycp |
optional | Optional source field or branch value. No receiver-wide presence, numeric bound, URL shape or account-state constraint is inferred. Presence diagnostic severity: warning. | docs | |
a.hd |
optional | Optional source field or branch value. No receiver-wide presence, numeric bound, URL shape or account-state constraint is inferred. Presence diagnostic severity: warning. | docs | |
g.did |
optional | Optional source field or branch value. No receiver-wide presence, numeric bound, URL shape or account-state constraint is inferred. Presence diagnostic severity: warning. | docs | |
a.pc |
optional | Optional source field or branch value. No receiver-wide presence, numeric bound, URL shape or account-state constraint is inferred. Presence diagnostic severity: warning. | docs | |
g.rst |
optional | Optional source field or branch value. No receiver-wide presence, numeric bound, URL shape or account-state constraint is inferred. Presence diagnostic severity: warning. | docs | |
g.rtbpp |
optional | Optional source field or branch value. No receiver-wide presence, numeric bound, URL shape or account-state constraint is inferred. Presence diagnostic severity: warning. | docs | |
g.rtbbp |
optional | Optional source field or branch value. No receiver-wide presence, numeric bound, URL shape or account-state constraint is inferred. Presence diagnostic severity: warning. | docs | |
g.pu |
optional | Optional source field or branch value. No receiver-wide presence, numeric bound, URL shape or account-state constraint is inferred. Presence diagnostic severity: warning. | docs | |
g.ru |
optional | Optional source field or branch value. No receiver-wide presence, numeric bound, URL shape or account-state constraint is inferred. Presence diagnostic severity: warning. | docs | |
gdpr_cmp_failure |
optional | Optional source field or branch value. No receiver-wide presence, numeric bound, URL shape or account-state constraint is inferred. Presence diagnostic severity: warning. | docs | |
gdpr |
optional | Optional source field or branch value. No receiver-wide presence, numeric bound, URL shape or account-state constraint is inferred. Presence diagnostic severity: warning. | docs | |
gdpr_consent |
optional | Optional source field or branch value. No receiver-wide presence, numeric bound, URL shape or account-state constraint is inferred. Presence diagnostic severity: warning. | docs | |
method |
required | The pinned JS producer inserts a script src request using GET. Complete HTTP capture contract. Presence diagnostic severity: warning. Evidence: vendor template. | vendor.weborama-wcm-js-impression.http.method.missingvendor.weborama-wcm-js-impression.http.method.emptyvendor.weborama-wcm-js-impression.http.method.invalid |
docs |
Validate a payload
pixellint validate url "$ARTIFACT" --rulepack vendor/weborama-wcm-js-impressionTry this failing payload in the playground. An example with a validation finding.
https://wcmvideotutorials.solution.weborama.fr/fcgi-bin/dispatch.fcgi?a.A=im&a.si=1111&g.pn=undefined&g.puid=undefined&a.te=2222&a.agi=128&g.de=0&ca=50000000000&a.hr=js&a.wi=300&a.he=250&a.sh=1080&a.sw=1920&a.ycp=&a.hd=0&g.ism=0&gdpr_cmp_failure=1&g.did=&a.we=1&g.pu=https%3A%2F%2Fpublisher.example%2Farticle&g.ru=
cargo install pixellint
·
npm install pixellint