prebid.js 8.4.0 → 8.6.0

package/modules/viantOrtbBidAdapter.md

@@ -0,0 +1,54 @@
+# Overview
+
+Module Name: VIANT Bidder Adapter
+Module Type: Bidder Adapter
+Maintainer: dist-runtime@viantinc.com
+
+# Description
+
+An adapter to get a bid from VIANT DSP.
+
+# Test Parameters
+```javascript
+    var adUnits = [            // Banner adUnit with only required parameters
+        {
+            code: 'test-div-minimal',
+            mediaTypes: {
+                banner: {
+                    sizes: [[728, 90]]
+                }
+            },
+            bids: [
+                {
+                    bidder: 'viant',
+                    params: {
+                        supplySourceId: 'supplier',
+                        publisherId: '464'
+                    }
+                }
+            ]
+        },
+        {
+            code: 'test-div-minimal-video',
+            mediaTypes: {
+                video: {
+                    playerSize: [640, 480],
+                    context: 'outstream'
+                }
+            },
+            bids: [
+                {
+                    bidder: 'viant',
+                    params: {
+                        supplySourceId: 'supplier',
+                        publisherId: '464' // required
+                    }
+                }
+            ]
+        }    
+    ];
+```
+
+Where:
+
+* placementId - Placement ID of the ad unit (required)

package/modules/vidazooBidAdapter.js

@@ -320,13 +320,20 @@ function interpretResponse(serverResponse, request) {
   }
 }
 
-function getUserSyncs(syncOptions, responses, gdprConsent = {}, uspConsent = '') {
+function getUserSyncs(syncOptions, responses, gdprConsent = {}, uspConsent = '', gppConsent = {}) {
   let syncs = [];
   const {iframeEnabled, pixelEnabled} = syncOptions;
   const {gdprApplies, consentString = ''} = gdprConsent;
+  const {gppString, applicableSections} = gppConsent;
 
   const cidArr = responses.filter(resp => deepAccess(resp, 'body.cid')).map(resp => resp.body.cid).filter(uniques);
-  const params = `?cid=${encodeURIComponent(cidArr.join(','))}&gdpr=${gdprApplies ? 1 : 0}&gdpr_consent=${encodeURIComponent(consentString || '')}&us_privacy=${encodeURIComponent(uspConsent || '')}`
+  let params = `?cid=${encodeURIComponent(cidArr.join(','))}&gdpr=${gdprApplies ? 1 : 0}&gdpr_consent=${encodeURIComponent(consentString || '')}&us_privacy=${encodeURIComponent(uspConsent || '')}`;
+
+  if (gppString && applicableSections?.length) {
+    params += '&gpp=' + encodeURIComponent(gppString);
+    params += '&gpp_sid=' + encodeURIComponent(applicableSections.join(','));
+  }
+
   if (iframeEnabled) {
     syncs.push({
       type: 'iframe',

package/modules/videojsVideoProvider.js

@@ -201,8 +201,15 @@ export function VideojsProvider(providerConfig, vjs_, adState_, timeState_, call
       return;
     }
 
-    player.ima.changeAdTag(adTagUrl);
-    player.ima.requestAds();
+    // The VideoJS IMA plugin version 1.11.0 will throw when the ad is empty.
+    try {
+      player.ima.changeAdTag(adTagUrl);
+      player.ima.requestAds();
+    } catch (e) {
+      /*
+      Handling is not required; ad errors are emitted automatically by video.js
+       */
+    }
   }
 
   function onEvent(type, callback, payload) {

package/modules/vrtcalBidAdapter.js

@@ -1,11 +1,14 @@
 import {registerBidder} from '../src/adapters/bidderFactory.js';
 import { BANNER } from '../src/mediaTypes.js';
 import {ajax} from '../src/ajax.js';
-import {isFn, isPlainObject} from '../src/utils.js';
 import { config } from '../src/config.js';
+import {deepAccess, isFn, isPlainObject} from '../src/utils.js';
+
+const GVLID = 706;
 
 export const spec = {
   code: 'vrtcal',
+  gvlid: GVLID,
   supportedMediaTypes: [BANNER],
   isBidRequestValid: function (bid) {
     return true;
@@ -62,13 +65,14 @@ export const spec = {
         site: {
           id: 'VRTCAL_FILLED',
           name: 'VRTCAL_FILLED',
-          cat: ['VRTCAL_FILLED'],
-          domain: decodeURIComponent(window.location.href).replace('https://', '').replace('http://', '').split('/')[0]
-
+          cat: deepAccess(bid, 'ortb2.site.cat', []),
+          domain: decodeURIComponent(window.location.href).replace('https://', '').replace('http://', '').split('/')[0],
+          page: bid.refererInfo.page
         },
         device: {
-          ua: 'VRTCAL_FILLED',
-          ip: 'VRTCAL_FILLED'
+          language: navigator.language,
+          ua: navigator.userAgent,
+          ip: deepAccess(bid, 'params.bidOverride.device.ip') || deepAccess(bid, 'params.ext.ip') || undefined
         },
         regs: {
           coppa: coppa,

package/modules/zeotapIdPlusIdSystem.js

@@ -60,6 +60,12 @@ export const zeotapIdPlusSubmodule = {
   getId() {
     const id = readCookie() || readFromLocalStorage();
     return id ? { id } : undefined;
+  },
+  eids: {
+    'IDP': {
+      source: 'zeotap.com',
+      atype: 1
+    },
   }
 };
 submodule('userId', zeotapIdPlusSubmodule);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prebid.js",
-  "version": "8.4.0",
+  "version": "8.6.0",
   "description": "Header Bidding Management Library",
   "main": "src/prebid.js",
   "scripts": {

package/src/adapters/bidderFactory.js

@@ -15,7 +15,7 @@ import {
   logError,
   logWarn, memoize,
   parseQueryStringParameters,
-  parseSizesInput,
+  parseSizesInput, pick,
   uniques
 } from '../utils.js';
 import {hook} from '../hook.js';
@@ -150,6 +150,7 @@ import {ACTIVITY_TRANSMIT_TID} from '../activities/activities.js';
 
 // common params for all mediaTypes
 const COMMON_BID_RESPONSE_KEYS = ['cpm', 'ttl', 'creativeId', 'netRevenue', 'currency'];
+const TIDS = ['auctionId', 'transactionId'];
 
 /**
  * Register a bidder with prebid, using the given spec.
@@ -184,7 +185,7 @@ export function registerBidder(spec) {
   }
 }
 
-function guardTids(bidderCode) {
+export function guardTids(bidderCode) {
   if (isActivityAllowed(ACTIVITY_TRANSMIT_TID, activityParams(MODULE_TYPE_BIDDER, bidderCode))) {
     return {
       bidRequest: (br) => br,
@@ -192,12 +193,20 @@ function guardTids(bidderCode) {
     };
   }
   function get(target, prop, receiver) {
-    if (['transactionId', 'auctionId'].includes(prop)) {
+    if (TIDS.includes(prop)) {
       return null;
     }
     return Reflect.get(target, prop, receiver);
   }
-  const bidRequest = memoize((br) => new Proxy(br, {get}), (arg) => arg.bidId)
+  function privateAccessProxy(target, handler) {
+    const proxy = new Proxy(target, handler);
+    // always allow methods (such as getFloor) private access to TIDs
+    Object.entries(target)
+      .filter(([_, v]) => typeof v === 'function')
+      .forEach(([prop, fn]) => proxy[prop] = fn.bind(target));
+    return proxy;
+  }
+  const bidRequest = memoize((br) => privateAccessProxy(br, {get}), (arg) => arg.bidId);
   /**
    * Return a view on bidd(er) requests where auctionId/transactionId are nulled if the bidder is not allowed `transmitTid`.
    *
@@ -207,7 +216,7 @@ function guardTids(bidderCode) {
    */
   return {
     bidRequest,
-    bidderRequest: (br) => new Proxy(br, {
+    bidderRequest: (br) => privateAccessProxy(br, {
       get(target, prop, receiver) {
         if (prop === 'bids') return br.bids.map(bidRequest);
         return get(target, prop, receiver);
@@ -312,7 +321,7 @@ export function newBidder(spec) {
             bid.originalCpm = bid.cpm;
             bid.originalCurrency = bid.currency;
             bid.meta = bid.meta || Object.assign({}, bid[bidRequest.bidder]);
-            const prebidBid = Object.assign(createBid(CONSTANTS.STATUS.GOOD, bidRequest), bid);
+            const prebidBid = Object.assign(createBid(CONSTANTS.STATUS.GOOD, bidRequest), bid, pick(bidRequest, TIDS));
             addBidWithCode(bidRequest.adUnitCode, prebidBid);
           } else {
             logWarn(`Bidder ${spec.code} made bid for unknown request ID: ${bid.requestId}. Ignoring.`);

package/src/adloader.js

@@ -24,7 +24,8 @@ const _approvedLoadExternalJSList = [
   'confiant',
   'arcspan',
   'airgrid',
-  'clean.io'
+  'clean.io',
+  'a1Media',
 ]
 
 /**

package/test/spec/libraries/mspa/activityControls_spec.js

@@ -1,220 +1,153 @@
-import {mspaRule, setupRules, isTransmitUfpdConsentDenied, isTransmitGeoConsentDenied, isBasicConsentDenied, isSensitiveNoticeMissing, isConsentDenied} from '../../../../libraries/mspa/activityControls.js';
+import {mspaRule, setupRules, isTransmitUfpdConsentDenied, isTransmitGeoConsentDenied, isBasicConsentDenied, sensitiveNoticeIs, isConsentDenied} from '../../../../libraries/mspa/activityControls.js';
 import {ruleRegistry} from '../../../../src/activities/rules.js';
-describe('isBasicConsentDenied', () => {
-  const cd = {
-    // not covered, opt in to targeted, sale, and share, all notices given, opt into precise geo
-    Gpc: 0,
-    KnownChildSensitiveDataConsents: [0, 0],
-    MspaCoveredTransaction: 2,
-    MspaOptOutOptionMode: 0,
-    MspaServiceProviderMode: 0,
-    PersonalDataConsents: 0,
-    SaleOptOut: 2,
-    SaleOptOutNotice: 1,
-    SensitiveDataLimitUseNotice: 1,
-    SensitiveDataProcessing: [0, 0, 0, 0, 0, 0, 0, 2, 0, 0, 0, 0],
-    SensitiveDataProcessingOptOutNotice: 1,
-    SharingNotice: 1,
-    SharingOptOut: 2,
-    SharingOptOutNotice: 1,
-    TargetedAdvertisingOptOut: 2,
-    TargetedAdvertisingOptOutNotice: 1,
-    Version: 1
-  };
-  it('should be false (basic consent conditions pass) with variety of notice and opt in', () => {
-    const result = isBasicConsentDenied(cd);
-    expect(result).to.equal(false);
-  });
-  it('should be true (basic consent conditions do not pass) with personal data consent set to true (invalid state)', () => {
-    cd.PersonalDataConsents = 2;
-    const result = isBasicConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.PersonalDataConsents = 0;
-  });
-  it('should be true (basic consent conditions do not pass) with sensitive opt in but no notice', () => {
-    cd.SensitiveDataLimitUseNotice = 0;
-    const result = isBasicConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.SensitiveDataLimitUseNotice = 1;
-  });
-})
-describe('isSensitiveNoticeMissing', () => {
-  const cd = {
-    // not covered, opt in to targeted, sale, and share, all notices given, opt into precise geo
-    Gpc: 0,
-    KnownChildSensitiveDataConsents: [0, 0],
-    MspaCoveredTransaction: 2,
-    MspaOptOutOptionMode: 0,
-    MspaServiceProviderMode: 0,
-    PersonalDataConsents: 0,
-    SaleOptOut: 2,
-    SaleOptOutNotice: 1,
-    SensitiveDataLimitUseNotice: 1,
-    SensitiveDataProcessing: [0, 0, 0, 0, 0, 0, 0, 2, 0, 0, 0, 0],
-    SensitiveDataProcessingOptOutNotice: 1,
-    SharingNotice: 1,
-    SharingOptOut: 2,
-    SharingOptOutNotice: 1,
-    TargetedAdvertisingOptOut: 2,
-    TargetedAdvertisingOptOutNotice: 1,
-    Version: 1
-  };
-  it('should be false (sensitive notice is given or not needed) with variety of notice and opt in', () => {
-    const result = isSensitiveNoticeMissing(cd);
-    expect(result).to.equal(false);
-  });
-  it('should be true (sensitive notice is missing) with variety of notice and opt in', () => {
-    cd.SensitiveDataLimitUseNotice = 2;
-    const result = isSensitiveNoticeMissing(cd);
-    expect(result).to.equal(true);
-    cd.SensitiveDataLimitUseNotice = 1;
-  });
-})
-describe('isConsentDenied', () => {
-  const cd = {
-    // not covered, opt in to targeted, sale, and share, all notices given, opt into precise geo
-    Gpc: 0,
-    KnownChildSensitiveDataConsents: [0, 0],
-    MspaCoveredTransaction: 2,
-    MspaOptOutOptionMode: 0,
-    MspaServiceProviderMode: 0,
-    PersonalDataConsents: 0,
-    SaleOptOut: 2,
-    SaleOptOutNotice: 1,
-    SensitiveDataLimitUseNotice: 1,
-    SensitiveDataProcessing: [0, 0, 0, 0, 0, 0, 0, 2, 0, 0, 0, 0],
-    SensitiveDataProcessingOptOutNotice: 1,
-    SharingNotice: 1,
-    SharingOptOut: 2,
-    SharingOptOutNotice: 1,
-    TargetedAdvertisingOptOut: 2,
-    TargetedAdvertisingOptOutNotice: 1,
-    Version: 1
-  };
-  it('should be false (consent given personalized ads / sale / share) with variety of notice and opt in', () => {
-    const result = isConsentDenied(cd);
-    expect(result).to.equal(false);
-  });
-  it('should be true (no consent) on opt out of targeted ads via TargetedAdvertisingOptOut', () => {
-    cd.TargetedAdvertisingOptOut = 1;
-    const result = isConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.TargetedAdvertisingOptOut = 2;
-  });
-  it('should be true (no consent) on opt out of targeted ads via no TargetedAdvertisingOptOutNotice', () => {
-    cd.TargetedAdvertisingOptOutNotice = 2;
-    const result = isConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.TargetedAdvertisingOptOutNotice = 1;
-  });
-  it('should be true (no consent) if TargetedAdvertisingOptOutNotice is 0 and TargetedAdvertisingOptOut is 2', () => {
-    cd.TargetedAdvertisingOptOutNotice = 0;
-    const result = isConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.TargetedAdvertisingOptOutNotice = 1;
-  });
-})
-describe('isTransmitUfpdConsentDenied', () => {
-  const cd = {
-    // not covered, opt in to targeted, sale, and share, all notices given, opt into precise geo
-    Gpc: 0,
-    KnownChildSensitiveDataConsents: [0, 0],
-    MspaCoveredTransaction: 2,
-    MspaOptOutOptionMode: 0,
-    MspaServiceProviderMode: 0,
-    PersonalDataConsents: 0,
-    SaleOptOut: 2,
-    SaleOptOutNotice: 1,
-    SensitiveDataLimitUseNotice: 1,
-    SensitiveDataProcessing: [0, 0, 0, 0, 0, 0, 0, 2, 0, 0, 0, 0],
-    SensitiveDataProcessingOptOutNotice: 1,
-    SharingNotice: 1,
-    SharingOptOut: 2,
-    SharingOptOutNotice: 1,
-    TargetedAdvertisingOptOut: 2,
-    TargetedAdvertisingOptOutNotice: 1,
-    Version: 1
-  };
-  it('should be false (consent given to add ufpd) with variety of notice and opt in', () => {
-    const result = isTransmitUfpdConsentDenied(cd);
-    expect(result).to.equal(false);
-  });
-  it('should be true (consent denied to add ufpd) if no consent to process health information', () => {
-    cd.SensitiveDataProcessing[2] = 1;
-    const result = isTransmitUfpdConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.SensitiveDataProcessing[2] = 0;
-  });
-  it('should be true (consent denied to add ufpd) with consent to process biometric data, as this should not be on openrtb', () => {
-    cd.SensitiveDataProcessing[6] = 1;
-    const result = isTransmitUfpdConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.SensitiveDataProcessing[6] = 1;
-  });
-  it('should be true (consent denied to add ufpd) without sharing notice', () => {
-    cd.SharingNotice = 2;
-    const result = isTransmitUfpdConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.SharingNotice = 1;
-  });
-  it('should be true (consent denied to add ufpd) with sale opt out', () => {
-    cd.SaleOptOut = 1;
-    const result = isTransmitUfpdConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.SaleOptOut = 2;
-  });
-  it('should be true (consent denied to add ufpd) without targeted ads opt out', () => {
-    cd.TargetedAdvertisingOptOut = 1;
-    const result = isTransmitUfpdConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.TargetedAdvertisingOptOut = 2;
-  });
-  it('should be true (consent denied to add ufpd) with missing sensitive data limit notice', () => {
-    cd.SensitiveDataLimitUseNotice = 2;
-    const result = isTransmitUfpdConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.SensitiveDataLimitUseNotice = 1;
-  });
-})
 
-describe('isTransmitGeoConsentDenied', () => {
-  const cd = {
-    // not covered, opt out of geo
-    Gpc: 0,
-    KnownChildSensitiveDataConsents: [0, 0],
-    MspaCoveredTransaction: 2,
-    MspaOptOutOptionMode: 0,
-    MspaServiceProviderMode: 0,
-    PersonalDataConsents: 0,
-    SaleOptOut: 2,
-    SaleOptOutNotice: 1,
-    SensitiveDataLimitUseNotice: 1,
-    SensitiveDataProcessing: [0, 0, 0, 0, 0, 0, 0, 1, 0, 0, 0, 0],
-    SensitiveDataProcessingOptOutNotice: 1,
-    SharingNotice: 1,
-    SharingOptOut: 2,
-    SharingOptOutNotice: 1,
-    TargetedAdvertisingOptOut: 2,
-    TargetedAdvertisingOptOutNotice: 1,
-    Version: 1
-  };
-  it('should be true (consent denied to add precise geo) -- sensitive flag denied', () => {
-    const result = isTransmitGeoConsentDenied(cd);
-    expect(result).to.equal(true);
+describe('Consent interpretation', () => {
+  function mkConsent(flags) {
+    return Object.assign({
+      // not covered, opt in to targeted, sale, and share, all notices given, opt into precise geo
+      Gpc: 0,
+      KnownChildSensitiveDataConsents: [0, 0],
+      MspaCoveredTransaction: 2,
+      MspaOptOutOptionMode: 0,
+      MspaServiceProviderMode: 0,
+      PersonalDataConsents: 0,
+      SaleOptOut: 2,
+      SaleOptOutNotice: 1,
+      SensitiveDataLimitUseNotice: 1,
+      SensitiveDataProcessing: [0, 0, 0, 0, 0, 0, 0, 2, 0, 0, 0, 0],
+      SensitiveDataProcessingOptOutNotice: 1,
+      SharingNotice: 1,
+      SharingOptOut: 2,
+      SharingOptOutNotice: 1,
+      TargetedAdvertisingOptOut: 2,
+      TargetedAdvertisingOptOutNotice: 1,
+      Version: 1
+    }, flags)
+  }
+  describe('isBasicConsentDenied', () => {
+    it('should be false (basic consent conditions pass) with variety of notice and opt in', () => {
+      const result = isBasicConsentDenied(mkConsent());
+      expect(result).to.equal(false);
+    });
+    it('should be true (basic consent conditions do not pass) with personal data consent set to true (invalid state)', () => {
+      const result = isBasicConsentDenied(mkConsent({
+        PersonalDataConsents: 2
+      }));
+      expect(result).to.equal(true);
+    });
+    it('should not deny when consent for under-13 is null', () => {
+      expect(isBasicConsentDenied(mkConsent({
+        KnownChildSensitiveDataConsents: [0, null]
+      }))).to.be.false;
+    })
   });
-  it('should be true (consent denied to add precise geo) -- sensitive data limit usage not given', () => {
-    cd.SensitiveDataLimitUseNotice = 0;
-    const result = isTransmitGeoConsentDenied(cd);
-    expect(result).to.equal(true);
-    cd.SensitiveDataLimitUseNotice = 1;
+
+  describe('isConsentDenied', () => {
+    it('should be false (consent given personalized ads / sale / share) with variety of notice and opt in', () => {
+      const result = isConsentDenied(mkConsent());
+      expect(result).to.equal(false);
+    });
+    it('should be true (no consent) on opt out of targeted ads via TargetedAdvertisingOptOut', () => {
+      const result = isConsentDenied(mkConsent({
+        TargetedAdvertisingOptOut: 1
+      }));
+      expect(result).to.equal(true);
+    });
+    it('should be true (no consent) on opt out of targeted ads via no TargetedAdvertisingOptOutNotice', () => {
+      const result = isConsentDenied(mkConsent({
+        TargetedAdvertisingOptOutNotice: 2
+      }));
+      expect(result).to.equal(true);
+    });
+    it('should be true (no consent) if TargetedAdvertisingOptOutNotice is 0 and TargetedAdvertisingOptOut is 2', () => {
+      const result = isConsentDenied(mkConsent({
+        TargetedAdvertisingOptOutNotice: 0
+      }));
+      expect(result).to.equal(true);
+    });
+    it('requires also SharingNotice to accept opt-in for Sharing', () => {
+      expect(isConsentDenied(mkConsent({
+        SharingNotice: 0
+      }))).to.be.true;
+    })
   });
-  it('should be false (consent given to add precise geo) -- sensitive position 8 (index 7) is true', () => {
-    cd.SensitiveDataProcessing[7] = 2;
-    const result = isTransmitGeoConsentDenied(cd);
-    expect(result).to.equal(false);
-    cd.SensitiveDataProcessing[7] = 1;
+
+  describe('isTransmitUfpdConsentDenied', () => {
+    it('should be false (consent given to add ufpd) with variety of notice and opt in', () => {
+      const result = isTransmitUfpdConsentDenied(mkConsent());
+      expect(result).to.equal(false);
+    });
+    Object.entries({
+      'health information': 2,
+      'biometric data': 6,
+    }).forEach(([t, flagNo]) => {
+      it(`'should be true (consent denied to add ufpd) if no consent to process ${t}'`, () => {
+        const consent = mkConsent();
+        consent.SensitiveDataProcessing[flagNo] = 1;
+        expect(isTransmitUfpdConsentDenied(consent)).to.be.true;
+      })
+    });
+
+    ['SharingNotice', 'SensitiveDataLimitUseNotice'].forEach(flag => {
+      it(`should be true (consent denied to add ufpd) without ${flag}`, () => {
+        expect(isTransmitUfpdConsentDenied(mkConsent({
+          [flag]: 2
+        }))).to.be.true;
+      })
+    });
+
+    ['SaleOptOut', 'TargetedAdvertisingOptOut'].forEach(flag => {
+      it(`should be true (consent denied to add ufpd) with ${flag}`, () => {
+        expect(isTransmitUfpdConsentDenied(mkConsent({
+          [flag]: 1
+        }))).to.be.true;
+      })
+    });
+
+    it('should be true (basic consent conditions do not pass) with sensitive opt in but no notice', () => {
+      const cd = mkConsent({
+        SensitiveDataLimitUseNotice: 0
+      });
+      cd.SensitiveDataProcessing[0] = 2;
+      expect(isTransmitUfpdConsentDenied(cd)).to.be.true;
+    });
+
+    it('should deny when sensitive notice is missing', () => {
+      const result = isTransmitUfpdConsentDenied(mkConsent({
+        SensitiveDataLimitUseNotice: 2
+      }));
+      expect(result).to.equal(true);
+    });
+
+    it('should not deny when biometric data opt-out is null', () => {
+      const cd = mkConsent();
+      cd.SensitiveDataProcessing[6] = null;
+      expect(isTransmitUfpdConsentDenied(cd)).to.be.false;
+    })
   });
-})
+
+  describe('isTransmitGeoConsentDenied', () => {
+    function geoConsent(geoOptOut, flags) {
+      const consent = mkConsent(flags);
+      consent.SensitiveDataProcessing[7] = geoOptOut;
+      return consent;
+    }
+    it('should be true (consent denied to add precise geo) -- sensitive flag denied', () => {
+      const result = isTransmitGeoConsentDenied(geoConsent(1));
+      expect(result).to.equal(true);
+    });
+    it('should be true (consent denied to add precise geo) -- sensitive data limit usage not given', () => {
+      const result = isTransmitGeoConsentDenied(geoConsent(1, {
+        SensitiveDataLimitUseNotice: 0
+      }));
+      expect(result).to.equal(true);
+    });
+    it('should be false (consent given to add precise geo) -- sensitive position 8 (index 7) is true', () => {
+      const result = isTransmitGeoConsentDenied(geoConsent(2));
+      expect(result).to.equal(false);
+    });
+  })
+});
 
 describe('mspaRule', () => {
   it('does not apply if SID is not applicable', () => {