Anonymised RTD: removed tagUrl setting

[kyrylenko]

Type of change

• Other

Description of change

The obsolete params.tagUrl config option has been removed. The Anonymised Marketing Tag is now always loaded from the hardcoded URL (https://static.anonymised.io/light/loader.js), preventing publishers from overriding it with an arbitrary external script.

Other information

Documentation PR prebid/prebid.github.io#6515

[Copilot]

Pull request overview

Removes the obsolete params.tagUrl configuration from the Anonymised RTD provider so the Marketing Tag is always loaded from the fixed static.anonymised.io URL, preventing publisher overrides.

Changes:

• Hardcode the Marketing Tag loader URL (ignoring params.tagUrl).
• Update unit tests to reflect the default URL behavior and add DOM cleanup between tests.
• Update module documentation to remove the params.tagUrl option.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
modules/anonymisedRtdProvider.js	Removes tagUrl override and always loads the Marketing Tag from the default URL.
test/spec/modules/anonymisedRtdProvider_spec.js	Updates expectations for default URL loading and removes the obsolete tagUrl-based test path.
modules/anonymisedRtdProvider.md	Removes params.tagUrl from the documented configuration options.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[coveralls]

Pull Request Test Coverage Report for Build 23941713782

Details

• 28 of 28 (100.0%) changed or added relevant lines in 2 files are covered.
• 1 unchanged line in 1 file lost coverage.
• Overall coverage remained the same at 96.341%

---

Files with Coverage Reduction	New Missed Lines	%
test/spec/modules/id5AnalyticsAdapter_spec.js	1	96.13%

Totals
Change from base Build 23926477506:	0.0%
Covered Lines:	216809
Relevant Lines:	225043

---

💛 - Coveralls

[patmmccann]

This seems like a breaking change. Publishers currently can copy paste your script to their own cdn and test new versions for behavior and performance; this regression removes that ability

We are inclined to decline this removal of useful functionality

[kyrylenko]

This seems like a breaking change. Publishers currently can copy paste your script to their own cdn and test new versions for behavior and performance; this regression removes that ability

We are inclined to decline this removal of useful functionality

Hi @patmmccann
https://static.anonymised.io/light/loader.js is the only URL from which the Anonymised tag can be served. This is because it is not a CDN asset, but an API endpoint that dynamically injects configuration based on the publisher’s domain. If a publisher copy paste the script to their own CDN, it will not work

For this reason, we have decided to deprecate the possibility for publishers to use a custom URL, so we have removed the params.tagUrl parameter

[patmmccann]

We ship breaking changes in major versions, we just shipped prebid 11 so this may be a while; you can undocument it now and ship a warning, what we don't want to happen is people refuse to upgrade a minor prebid version bc they want to avoid your change

[kyrylenko]

Hi @patmmccann , thanks for the guidance, here is what I've updated:
anonymisedRtdProvider.js: params.tagUrl is retained but now logs a deprecation warning when set. The required query string parameters ?ref=prebid&d=<hostname> are always appended to the tag URL, including when a custom tagUrl is provided
anonymisedRtdProvider.md: params.tagUrl is marked as Deprecated in the config table.

[jon-caines-idward]

Good morning @patmmccann. Could you please provide feedback on Pavlo's latest comment? Thanks