Additional DSA validations

[patmmccann]

Here are some we're looking at in JS when DSA is required:

1. If regs.ext.dsa.pubrender exists and is 2, response adrender should not = 1
2. If regs.ext.dsa.pubrender exists and is 0, response adrender must = 1
3. regs.ext.dsa.pubrender does not exist, don't do these validations

Also, there are field length validations not defined with the original passthrough requirements. The paid and behalf response fields should have not more than 100 chars or the response should be rejected.

In any case:

• add an entry in ext.prebid.warning when in debug mode
• use seat nonbid code 305 as the reject reason (305 "Response Rejected - Privacy")

[bretg]

I think we need to define new seat non-bid codes.

[bretg]

This would be the first instance doing a legal basis check on the bid response. The Go and Java teams will have to look into the impact.

[bretg]

Opened PR for the IAB seatnonbid code file to propose code 305 to cover rejecting responses for privacy reasons. InteractiveAdvertisingBureau/openrtb#163

[bretg]

As discussed in committee yesterday, pulled the legal basis check out into a separate issue #3508 and made the remaining items here ready-for-dev

[bsardo]

Opened PR for the IAB seatnonbid code file to propose code 305 to cover rejecting responses for privacy reasons. InteractiveAdvertisingBureau/openrtb#163

@bretg just to clarify, I assume we will use 305 if any of the DSA validation checks fail including if the DSA object is required but not present on the bid, is that correct?
I only ask because we previously chose 300 for the required validation check and I also see mention above of possibly proposing two other new codes, 310 and 311, be created.

[bretg]

@bsardo - we settled on 305 in the PMC last week. Removed references to the others

[SyntaxNode]

Implemented in PBS-Go v2.9.0. We're using seat non-bid code 300 for now and will change it to 305 when that's accepted by the IAB.

[bretg]

released with PBS-Java 3.2