Tag Firewall
TagFirewall can whitelist or blacklist tags.
Last updated
TagFirewall can whitelist or blacklist tags.
Last updated
TagFirewall is a paid extension that can be installed with Commanders Act TMS or run in standalone mode. Please contact a Commanders Act consultant or account manager to activate it.
TagFirewall blocks unauthorized tags (domains) in real time. This can e.g. help to block and reduce the risk of piggybacking tags. TagFirewall is highly dynamic and can therefore enrich an existing Content Security Policy (CSP) setup to resolve critical issues with tags in minutes or replace the need for a Content Security Policy (CSP) entirely. TagFirewall offers two modes:
This mode blocks tag communication with a configurable list of domains. Communication with all other domains is still permitted.
This mode blocks tag communication with all domains except a configured whitelist.
TagFirewall can be set up and configured with the tag template "Commanders Act - TagFirewall" in Commanders Act TMS tag library.
TagFirewall can be set up and configured with a custom JavaScript tag for all other installations. The tag has following options.
The tag should be included in the <head>
of your document. It can only block tags that are loaded after the TagFirewall tag and JavaScript library file.
Option
Description
Mode
Allows to select Blacklist or Whitelist mode.
Blacklist domains
Domains that should be blacklisted. Enclosed in "
and and separated by,
. (Only for Blacklist Mode)
Internal domains
Tag domains that should be whitelisted. Enclosed in "
and and separated by,
. (Only for Whitelist Mode)
Tag domains
Internal domains (domain the website needs to function) that should be whitelisted. Enclosed in "
and and separated by,
. (Only for Whitelist Mode)
Check SSL
This option allows to block all http
script hits (it will only allows https
script hits).
Option
Description
<whitelist_tags>
Array of domains used by tags that should not be blocked. (Only for Whitelist Mode)
<whitelist_internal>
Array of internal domains (domain the website needs to function) that should not be blocked. (Only for Whitelist Mode)
<blacklist_tags>
Array of domains used by tags that should be blacklisted. (Only for Blacklist Mode)
<active_flag>
This option activates TagFirewall. Set to true
to activate TagFirewall.
<check_ssl>
This option allows to block all http
script hits (it will only allows https
script hits). Set to true
to activate it.
<script_url>
URL of the TagFirewall library JavaScript file. This URL will be provided by a Commanders Act Consultant or Account Manager.