Repository navigation
docs: explain consent-dependent exceptions for custom TCF vendors - #6915
patmmccann wants to merge 3 commits into
Conversation
✅ Deploy Preview for prebid-docs-preview ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 8b3cd7b404
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
… in custom-vendor example
Prebid.js applies the default rule to any purpose missing from gdpr.rules, so a page configuring only some rules never got the storage or personalizedAds exception. Add the default rule for each missing exception purpose instead of mapping only configured rules. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Summary
vendorExceptionsmust not be used as permanent substitutes for consent, especially fortransmitEids.tcData.vendor.consents) from consent for CMP-specific custom/non-IAB vendors; point AC providers to the native Additional Consent integration.softVendorExceptionspattern that removes exceptions on denial or withdrawal and preserves purpose checks.The original PubMatic TCF 2.2 operational-status problem was reported resolved in the issue. This addresses the remaining request for documentation on safely handling non-GVL/custom-vendor consent.
Validation
transmitEidsand vendor-exception behavior against currentmodules/tcfControl.ts.Closes prebid/Prebid.js#10523