diff options
| author | Yuriy Andamasov <yuriy@vyos.io> | 2026-05-06 23:46:48 +0300 |
|---|---|---|
| committer | Yuriy Andamasov <yuriy@vyos.io> | 2026-05-07 18:23:30 +0300 |
| commit | 887b7c2de8efc107c9a8a6ad5d092e3b77eaba24 (patch) | |
| tree | d07b96524b58338b700a0d2f68d9079f3df5607d /docs/_templates/layout.html | |
| parent | bdc4ee3ed569513cf5bca8dc2e930ea0b8a2f0f7 (diff) | |
| download | vyos-documentation-887b7c2de8efc107c9a8a6ad5d092e3b77eaba24.tar.gz vyos-documentation-887b7c2de8efc107c9a8a6ad5d092e3b77eaba24.zip | |
feat(cookiebot): drop GTM noscript fallback for prior-consent compliance
The `<noscript>` GTM iframe loads via a direct HTTP request to
googletagmanager.com/ns.html and bypasses both Cookiebot's auto-blocker
and Google Consent Mode v2 entirely — Consent Mode is JS-only
(`gtag('consent', 'default')` and the update API), so a noscript
request can't carry consent state. Under strict prior-consent (GDPR),
JS-disabled visitors get no analytics rather than unconsented analytics.
Addresses CodeRabbit review feedback on PR #1872.
\xf0\x9f\xa4\x96 Generated by [robots](https://vyos.io)
Diffstat (limited to 'docs/_templates/layout.html')
| -rw-r--r-- | docs/_templates/layout.html | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/docs/_templates/layout.html b/docs/_templates/layout.html index 4cd4e352..53963445 100644 --- a/docs/_templates/layout.html +++ b/docs/_templates/layout.html @@ -67,9 +67,11 @@ {% endblock %} {% block body %} - {# GTM noscript fallback #} - <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-T5VQHRT" - height="0" width="0" style="display:none;visibility:hidden" - title="Google Tag Manager"></iframe></noscript> + {# No GTM <noscript> iframe fallback. The fallback iframe loads via + a direct HTTP request and bypasses Cookiebot's auto-blocker and + Google Consent Mode v2 entirely (consent state is set via the JS + gtag API which a noscript request can't run). For strict + prior-consent compliance under GDPR, JS-disabled visitors get no + analytics rather than unconsented analytics. #} {{ super() }} {% endblock %} |