prebid-server
prebid-server copied to clipboard
prebid
Additional DSA validations
Here are some we're looking at in JS when DSA is required:
- If regs.ext.dsa.pubrender exists and is 2, response adrender should not = 1
- If regs.ext.dsa.pubrender exists and is 0, response adrender must = 1
- regs.ext.dsa.pubrender does not exist, don't do these validations
Also, there are field length validations not defined with the original passthrough requirements. The paid and behalf response fields should have not more than 100 chars or the response should be rejected.
In any case:
- add an entry in ext.prebid.warning when in debug mode
- use seat nonbid code 305 as the reject reason (305 "Response Rejected - Privacy")
This would be the first instance doing a legal basis check on the bid response. The Go and Java teams will have to look into the impact.
Opened PR for the IAB seatnonbid code file to propose code 305 to cover rejecting responses for privacy reasons. https://github.com/InteractiveAdvertisingBureau/openrtb/pull/163
As discussed in committee yesterday, pulled the legal basis check out into a separate issue https://github.com/prebid/prebid-server/issues/3508 and made the remaining items here ready-for-dev
Opened PR for the IAB seatnonbid code file to propose code 305 to cover rejecting responses for privacy reasons. InteractiveAdvertisingBureau/openrtb#163
@bretg just to clarify, I assume we will use 305 if any of the DSA validation checks fail including if the DSA object is required but not present on the bid, is that correct? I only ask because we previously chose 300 for the required validation check and I also see mention above of possibly proposing two other new codes, 310 and 311, be created.
@bsardo - we settled on 305 in the PMC last week. Removed references to the others
Implemented in PBS-Go v2.9.0. We're using seat non-bid code 300 for now and will change it to 305 when that's accepted by the IAB.
