@duckduckgo/autoconsent 14.74.0 → 14.76.0

package/tests/cookieconsent3.spec.ts

@@ -1,3 +1,3 @@
 import generateCMPTests from '../playwright/runner';
 
-generateCMPTests('cookieconsent3', ['https://playground.cookieconsent.orestbida.com/']);
+generateCMPTests('cookieconsent3', ['https://playground.cookieconsent.orestbida.com/', 'https://www.testsieger.de/after-shaves/']);

package/tests/didomi.spec.ts

@@ -12,7 +12,18 @@ generateCMPTests(
     ],
     {
         testOptIn: true,
+        // Self-test is disabled because some sites (e.g. planet.fr) navigate away
+        // after clicking the disagree button, which destroys the Didomi state.
         testSelfTest: false,
         skipRegions: ['US'],
     },
 );
+
+// US-specific Didomi sites where the CMP runs in CCPA/CPRA mode.
+// In CCPA mode there is no explicit reject button, so the rule relies on the
+// Didomi JS API (EVAL_DIDOMI_OPT_OUT) instead of clicking a DOM element.
+generateCMPTests('didomi', ['https://newrepublic.com/article/162247/andreas-malm-blow-up-pipeline-climate-direct-action'], {
+    testOptIn: false,
+    testSelfTest: true,
+    onlyRegions: ['US'],
+});

package/tests/onetrust.spec.ts

@@ -6,6 +6,8 @@ generateCMPTests('Onetrust', [
     'https://www.okcupid.com/',
     'https://doodle.com/',
     'https://www.coca-cola.com/us/en',
+    'https://www.seur.com/es/index.html',
+    'https://satsuite.collegeboard.org/sat/dates-deadlines',
 ]);
 
 generateCMPTests('Onetrust', ['https://mailchimp.com/', 'https://www.accenture.com/', 'https://www.zoom.us'], {
@@ -34,3 +36,22 @@ generateCMPTests('Onetrust', ['https://www.newyorker.com/', 'https://www.adobe.c
 generateCMPTests('Onetrust', ['https://eu.icebreaker.com/de-de?country=DE'], {
     skipRegions: ['US'],
 });
+
+// CCPA notice-only banner variant: only a "Close" button, no Accept/Reject/Settings.
+// Only appears in the US (CCPA). The rule clicks Close to dismiss the banner; opt-in
+// and self-test don't apply (no real consent state to flip).
+// See lib/cmps/onetrust.ts for the variant detection.
+generateCMPTests(
+    'Onetrust',
+    [
+        'https://www.columbia.com/c/mens-insulated-puffer-jackets/',
+        'https://www.mountainhardwear.com/',
+        'https://www.prana.com/',
+        'https://www.sorel.com/',
+    ],
+    {
+        onlyRegions: ['US'],
+        testOptIn: false,
+        testSelfTest: false,
+    },
+);

package/tests/trustarc.spec.ts

@@ -12,7 +12,7 @@ generateCMPTests('TrustArc-top', ['https://www.garmin.com/de-DE/'], {
     skipRegions: ['US'],
 });
 
-generateCMPTests('TrustArc-frame', ['https://www.wish.com/'], {
+generateCMPTests('TrustArc-frame', ['https://www.wish.com/', 'https://www.usa.philips.com/'], {
     testOptOut: true,
     testSelfTest: false,
     testOptIn: false, // opt-in works, but is triggered by the top frame

package/tests-wtr/heuristics/heuristics-utils.test.ts

@@ -75,6 +75,15 @@ describe('isRejectButton', () => {
         expect(isRejectButton('let us Reject All cookies', [/reject all/gi], [/let us/gi])).to.be.false;
     });
 
+    it('matches "except strictly necessary" qualifier', () => {
+        // OneTrust on apnews.com labels the reject button "I Reject All (except Strictly Necessary)"
+        expect(isRejectButton('I Reject All (except Strictly Necessary)')).to.be.true;
+        expect(isRejectButton('Reject All (except Strictly Necessary)')).to.be.true;
+        expect(isRejectButton('Reject All (except Necessary)')).to.be.true;
+        expect(isRejectButton('Deny All (except Strictly Essential)')).to.be.true;
+        expect(isRejectButton('I Reject All except necessary')).to.be.true;
+    });
+
     it('returns false for empty string', () => {
         expect(isRejectButton('')).to.be.false;
     });

package/tests-wtr/lifecycle/find-cmp.html

@@ -19,5 +19,6 @@
             <button>Accept All</button>
             <button>Reject All</button>
         </div>
+        <div id="onetrust-pc-sdk" style="display: none">Cookie Preference Center</div>
     </body>
 </html>

package/tests-wtr/lifecycle/find-cmp.ts

@@ -1,5 +1,6 @@
 import { expect } from '@esm-bundle/chai';
 import Autoconsent from '../../lib/web';
+import Onetrust from '../../lib/cmps/onetrust';
 
 describe('Autoconsent.findCmp', () => {
     let autoconsent: Autoconsent;
@@ -64,6 +65,12 @@ describe('Autoconsent.findCmp', () => {
             expect(found).to.have.length(0);
         });
 
+        it('does not match Onetrust for a hidden preference center without a banner', async () => {
+            autoconsent.rules.push(new Onetrust(autoconsent));
+            const found = await autoconsent.findCmp(0);
+            expect(found).to.have.length(0);
+        });
+
         it('does not return a rule if the runContext does not match: frame-only rule', async () => {
             autoconsent.addDeclarativeCMP({
                 name: 'runContextRule',