Skip to content

Add captcha eventHub aggregation pixel definitions#9090

Open
jdorweiler wants to merge 1 commit into
duckduckgo:developfrom
jdorweiler:jd/android-captcha
Open

Add captcha eventHub aggregation pixel definitions#9090
jdorweiler wants to merge 1 commit into
duckduckgo:developfrom
jdorweiler:jd/android-captcha

Conversation

@jdorweiler

@jdorweiler jdorweiler commented Jul 2, 2026

Copy link
Copy Markdown

Task/Issue URL: https://app.asana.com/1/137249556945/project/72649045549333/task/1216219466895942
Tech Design URL (if applicable):

Description

Goes with duckduckgo/privacy-configuration#5475
Document the day/week bucketed captcha detection pixels (recaptcha, hcaptcha, turnstile, cloudflare, other) fired by the eventHub feature.

Steps to test this PR

Feature 1

  • [ ]
  • [ ]

UI changes

Before After
!(Upload before screenshot) (Upload after screenshot)

Note

Low Risk
Schema-only pixel documentation with no runtime or client logic changes in this PR.

Overview
Adds 10 new eventHub pixel definitions in event_hub.json5 for bucketed CAPTCHA detection telemetry, mirroring the existing adwall day/week events.

Each CAPTCHA category gets daily and weekly pixels: reCAPTCHA, hCaptcha, Cloudflare Turnstile, Cloudflare challenge pages, and other/generic. All use the same count (bucketed string) and attributionPeriod (period start Unix timestamp) parameters, with other triggers and GuiltyDolphin as owner—intended to document pixels emitted by the paired privacy-configuration eventHub work.

Reviewed by Cursor Bugbot for commit 89811c0. Bugbot is set up for automated code reviews on this repo. Configure here.

Document the day/week bucketed captcha detection pixels
(recaptcha, hcaptcha, turnstile, cloudflare, other) fired by the
eventHub feature.

Co-authored-by: Cursor <cursoragent@cursor.com>

@cursor cursor Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

Reviewed by Cursor Bugbot for commit 89811c0. Configure here.

"type": "integer",
"description": "Unix timestamp (UTC) denoting the start of the measurement period"
}
]

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Missing atb stripping for captcha pixels

Medium Severity

The ten new webTelemetry_captcha_* pixel definitions are not registered in PixelParamRemovalInterceptor (or an EventHub PixelParamRemovalPlugin). EventHub fires these names via pixel.enqueueFire, which still attaches implicit atb, so triage will reject undeclared atb once the companion privacy-config telemetry goes live.

Fix in Cursor Fix in Web

Triggered by learned rule: New pixel definitions must handle implicit atb parameter via PixelParamRemovalInterceptor

Reviewed by Cursor Bugbot for commit 89811c0. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant