TagFirewall
TagFirewall can whitelist or blacklist tags.
TagFirewall is a paid extension that can be installed with TagCommander or run in standalone mode. Please contact a Commanders Act consultant or account manager to activate it.
TagFirewall blocks unauthorised tags (domains) in real time. This can e.g. help to block and reduce the risk of piggybacking tags. TagFirewall is highly dynamic and can therefore enrich an existing Content Security Policy (CSP) setup to resolve critical issues with tags in minutes or replace the need for a Content Security Policy (CSP) entirely. TagFirewall offers two modes:
This mode blocks tag communication with a configurable list of domains. Communication with all other domains is still permitted.
This mode blocks tag communication with all domains except a configured whitelist.
TagFirewall can be set up and configured with the tag template "TagCommander - TagFirewall" in TagCommander.
Option | Description |
Mode | Allows to select Blacklist or Whitelist mode. |
Blacklist domains | Domains that should be blacklisted. Enclosed in " and and separated by, . (Only for Blacklist Mode) |
Internal domains | Tag domains that should be whitelisted. Enclosed in " and and separated by, . (Only for Whitelist Mode) |
Tag domains | Internal domains (domain the website needs to function) that should be whitelisted. Enclosed in " and and separated by, . (Only for Whitelist Mode) |
Check SSL | This option allows to block all http script hits (it will only allows https script hits). |
Example of a TagFirewall configuration.
TagFirewall can be set up and configured with a custom JavaScript tag for all other installations. The tag has following options.
Option | Description |
<whitelist_tags> | Array of domains used by tags that should not be blocked. (Only for Whitelist Mode) |
<whitelist_internal> | Array of internal domains (domain the website needs to function) that should not be blocked. (Only for Whitelist Mode) |
<blacklist_tags> | Array of domains used by tags that should be blacklisted. (Only for Blacklist Mode) |
<active_flag> | This option activates TagFirewall. Set to true to activate TagFirewall. |
<check_ssl> | This option allows to block all http script hits (it will only allows https script hits). Set to true to activate it. |
<script_url> | URL of the TagFirewall library JavaScript file. This URL will be provided by a Commanders Act Consultant or Account Manager. |
Blacklist Mode
Whitelist Mode
<script>
tC = tC || {};
tC.tagFirewall = tC.tagFirewall || {};
tC.tagFirewall.list = {
"blacklist": {
"tags": <blacklist_tags>
}
};
tC.tagFirewall.checkSSL = <check_ssl>;
tC.tagFirewall.blocked = <active_flag>;
</script>
<script src="<script_url>"></script>
<script>
tC = tC || {};
tC.tagFirewall = tC.tagFirewall || {};
tC.tagFirewall.list = {
"whitelist": {
"internal": <whitelist_internal>,
"tags": <whitelist_tags>
}
};
tC.tagFirewall.checkSSL = <check_ssl>;
tC.tagFirewall.blocked = <active_flag>;
</script>
<script src="<script_url>"></script>
Blacklist Mode
Whitelist Mode
<script>
tC = tC || {};
tC.tagFirewall = tC.tagFirewall || {};
tC.tagFirewall.list = {
"blacklist": {
"tags": ["bad-domain1.com", "bad-domain2.com"]
}
};
tC.tagFirewall.checkSSL = true;
tC.tagFirewall.blocked = true;
</script>
<script src="<script_url>"></script>
<script>
tC = tC || {};
tC.tagFirewall = tC.tagFirewall || {};
tC.tagFirewall.list = {
"whitelist": {
"internal": ["cdn.yourdomain.com", "cdn.yourdomain2.com"],
"tags": ["facebook.com","twitter.com"]
}
};
tC.tagFirewall.checkSSL = true;
tC.tagFirewall.blocked = true;
</script>
<script src="<script_url>"></script>
The tag should be included in the
<head> of your document. It can only block tags that are loaded after the TagFirewall tag and JavaScript library file.Last modified 2yr ago