Skip to content

AMP: valid CCPA consent dropped when gdpr_applies=true (advisory warning short-circuits overrideWithParams) #4867

Description

@postindustria-code

In endpoints/openrtb2/amp_auction.go overrideWithParams, a non-nil warning from amp.ReadPolicy causes an early return before policyWriter.Write(req) (and before the TMax/targeting/trace overrides).

For consent_type=3 with a valid CCPA consent_string and gdpr_applies=true, ReadPolicy returns a valid ccpa.ConsentWriter plus a purely advisory warning ("gdpr_applies value was ignored because provided consent string is a CCPA consent string"), so the valid regs.us_privacy is silently dropped and the AMP overrides are skipped.

Repro: /openrtb2/auction/amp?tag_id=1&consent_type=3&consent_string=1YNN&gdpr_applies=true

Suggested fix: apply the writer for advisory (consent-valid) warnings and only drop on an invalid-consent warning; add an overrideWithParams-level test asserting regs.us_privacy is set.

(Noticed while reviewing #4626, which fixed the analogous GPP case.)

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

Status
Research

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions