IMA got blocked when trying to request vast uri from Google doubleclick domain

534 views
Skip to first unread message

can...@opensource.com.vn

unread,
Apr 19, 2021, 9:41:05 PM4/19/21
to Interactive Media Ads SDK

Hello team,

I am using videojs-ima plugin to deliver video ad on our site. Currently noticed by the vast error when ima trying to request vast from bid.g.doubleclick.net uri:

Step to reproduce:

<?xml version="1.0" encoding="UTF-8"?> <VAST version="2.0"><Ad id="doubleverify_ad"><Wrapper><AdSystem><![CDATA[doubleverify]]></AdSystem><VASTAdTagURI><![CDATA[https://bid.g.doubleclick.net/dbm/vast?dbm_c=AKAmf-Bsji8BpmmS4t2Vl5BAuas--EYrl4v1zpLtem3HAYhIju7Wb5522mqSNKYldjaEQXx9QcCLgglv1-P6bt1-kxek2vM_zg]]></VASTAdTagURI><Error><![CDATA[https://vtrk.doubleverify.com/t/v=1&t=event&tid=ZW-12000000&ec=vast&cid=75a39c18-40ef-40d3-af45-31096f763ef9&el=https_3A_2F_2Fbid.g.doubleclick.net_2Fdbm_2Fvast_3Fdbm_5Fc_3DAKAmf-Bsji8BpmmS4t2Vl5BAuas--EYrl4v1zpLtem3HAYhIju7Wb5522mqSNKYldjaEQXx9QcCLgglv1-P6bt1-kxek2vM_5Fzg&ea=error&cm114=0&cd111=wrapper&cd112=No_20Ads_20in_20VAST&cd117=-1&cd190=11212034&cd191=1074205118&cd192=147123&cd193=300372263&cd195=1&cd196=3&cd188=ap-northeast-2&cd189=ec2&cd182=vpaid-transformer_400.20.34&cd141=[APIFRAMEWORKS]&cd142=_255BTIMESTAMP_255D&cd143=[TIMESTAMP]&cd10=[ERRORCODE]&z=16184916451902818249/https/tps.doubleverify.com/visit.jpg?ctx=818052&cmp=DV024064&sid=1234&plc=1234&advid=818053&crt=vastError&vasttrkevt=impression&dvp_ctx=11212034&dvp_cmp=1074205118&dvp_sid=147123&dvp_plc=300372263&tagtype=video&dvtagver=6.1.img&adsrv=166&dup=75a39c18-40ef-40d3-af45-31096f763ef9&dvp_pgurl=%5BPAGEURL&dvp_zjsver=0.20.34&vstvr=2.0-r&essd=[SERVERSIDE]&dvp_redirect=2&dvp_blk=1&dvp_psf=0&verr=[ERRORCODE]]]></Error><Impression><![CDATA[https://tps.doubleverify.com/visit.jpg?vstevt=2&tagtype=video&dvtagver=6.1.img&ctx=11212034&cmp=1074205118&sid=147123&plc=300372263&adsrv=166&dup=75a39c18-40ef-40d3-af45-31096f763ef9&dvp_pgurl=%5BPAGEURL&dvp_zjsver=0.20.34&vstvr=2.0-r&dvp_redirect=2&dvp_blk=1&dvp_psf=0&app=[APPBUNDLE]&gdpr_consent=[GDPRCONSENT]&essd=[SERVERSIDE]]]></Impression><Impression><![CDATA[https://vtrk.doubleverify.com/?v=1&t=event&tid=ZW-12000000&ec=vast&cid=75a39c18-40ef-40d3-af45-31096f763ef9&el=https%3A%2F%2Fbid.g.doubleclick.net%2Fdbm%2Fvast%3Fdbm_c%3DAKAmf-Bsji8BpmmS4t2Vl5BAuas--EYrl4v1zpLtem3HAYhIju7Wb5522mqSNKYldjaEQXx9QcCLgglv1-P6bt1-kxek2vM_zg&ea=impression&cm114=0&cd111=wrapper&cd112=No%20Ads%20in%20VAST&cd117=-1&cd190=11212034&cd191=1074205118&cd192=147123&cd193=300372263&cd195=1&cd196=3&cd188=ap-northeast-2&cd189=ec2&cd182=vpaid-transformer%400.20.34&cd141=[APIFRAMEWORKS]&cd142=%255BTIMESTAMP%255D&cd143=[TIMESTAMP]&z=16184916451902818249]]></Impression><Creatives><Creative><Linear><TrackingEvents><Tracking event="firstQuartile"><![CDATA[https://tps.doubleverify.com/event.png?vstevt=4&dup=75a39c18-40ef-40d3-af45-31096f763ef9]]></Tracking><Tracking event="midpoint"><![CDATA[https://tps.doubleverify.com/event.png?vstevt=6&dup=75a39c18-40ef-40d3-af45-31096f763ef9]]></Tracking><Tracking event="thirdQuartile"><![CDATA[https://tps.doubleverify.com/event.png?vstevt=8&dup=75a39c18-40ef-40d3-af45-31096f763ef9]]></Tracking><Tracking event="complete"><![CDATA[https://tps.doubleverify.com/event.png?vstevt=10&dup=75a39c18-40ef-40d3-af45-31096f763ef9]]></Tracking><Tracking event="start"><![CDATA[https://tps.doubleverify.com/event.png?vstevt=0&dup=75a39c18-40ef-40d3-af45-31096f763ef9]]></Tracking><Tracking event="pause"><![CDATA[https://tps.doubleverify.com/event.png?vstevt=22&dup=75a39c18-40ef-40d3-af45-31096f763ef9]]></Tracking><Tracking event="resume"><![CDATA[https://tps.doubleverify.com/event.png?vstevt=23&dup=75a39c18-40ef-40d3-af45-31096f763ef9]]></Tracking><Tracking event="mute"><![CDATA[https://tps.doubleverify.com/event.png?vstevt=30&dup=75a39c18-40ef-40d3-af45-31096f763ef9]]></Tracking><Tracking event="unmute"><![CDATA[https://tps.doubleverify.com/event.png?vstevt=31&dup=75a39c18-40ef-40d3-af45-31096f763ef9]]></Tracking><Tracking event="complete"><![CDATA[https://vtrk.doubleverify.com/?v=1&t=event&tid=ZW-12000000&ec=vast&cid=75a39c18-40ef-40d3-af45-31096f763ef9&el=https%3A%2F%2Fbid.g.doubleclick.net%2Fdbm%2Fvast%3Fdbm_c%3DAKAmf-Bsji8BpmmS4t2Vl5BAuas--EYrl4v1zpLtem3HAYhIju7Wb5522mqSNKYldjaEQXx9QcCLgglv1-P6bt1-kxek2vM_zg&ea=complete&cm114=0&cd111=wrapper&cd112=No%20Ads%20in%20VAST&cd117=-1&cd190=11212034&cd191=1074205118&cd192=147123&cd193=300372263&cd195=1&cd196=3&cd188=ap-northeast-2&cd189=ec2&cd182=vpaid-transformer%400.20.34&cd141=[APIFRAMEWORKS]&cd142=%255BTIMESTAMP%255D&cd143=[TIMESTAMP]&z=16184916451902818249]]></Tracking></TrackingEvents><VideoClicks><ClickTracking><![CDATA[https://vtrk.doubleverify.com/?v=1&t=event&tid=ZW-12000000&ec=vast&cid=75a39c18-40ef-40d3-af45-31096f763ef9&el=https%3A%2F%2Fbid.g.doubleclick.net%2Fdbm%2Fvast%3Fdbm_c%3DAKAmf-Bsji8BpmmS4t2Vl5BAuas--EYrl4v1zpLtem3HAYhIju7Wb5522mqSNKYldjaEQXx9QcCLgglv1-P6bt1-kxek2vM_zg&ea=click&cm114=0&cd111=wrapper&cd112=No%20Ads%20in%20VAST&cd117=-1&cd190=11212034&cd191=1074205118&cd192=147123&cd193=300372263&cd195=1&cd196=3&cd188=ap-northeast-2&cd189=ec2&cd182=vpaid-transformer%400.20.34&cd141=[APIFRAMEWORKS]&cd142=%255BTIMESTAMP%255D&cd143=[TIMESTAMP]&z=16184916451902818249]]></ClickTracking></VideoClicks></Linear></Creative></Creatives><Extensions><Extension type="AdVerifications"><AdVerifications><Verification vendor="doubleverify.com-omid"><JavaScriptResource apiFramework="omid" browserOptional="true"><![CDATA[https://cdn.doubleverify.com/dvtp_src.js?vendor_key=doubleverify.com-omid]]></JavaScriptResource><TrackingEvents><Tracking event="verificationNotExecuted"><![CDATA[https://tps.doubleverify.com/visit.jpg?verr=[REASON]&tagtype=video&dvtagver=6.1.img&ctx=818052&cmp=DV064005&sid=123&plc=verificationRejection&advid=818053&crt=omidVerificationNotExecuted&vasttrkevt=impression&dvp_ctx=11212034&dvp_cmp=1074205118&dvp_sid=147123&dvp_plc=300372263&adsrv=166&dup=75a39c18-40ef-40d3-af45-31096f763ef9&dvp_pgurl=%5BPAGEURL&dvp_zjsver=0.20.34&vstvr=2.0-r&dvp_redirect=2&dvp_blk=1&dvp_psf=0]]></Tracking></TrackingEvents><VerificationParameters><![CDATA[tagtype=video&dvtagver=6.1.src&msrapi=jsOmid&ctx=11212034&cmp=1074205118&sid=147123&plc=300372263&adsrv=166&dup=75a39c18-40ef-40d3-af45-31096f763ef9&dvp_pgurl=%5BPAGEURL&dvp_zjsver=0.20.34&vstvr=2.0-r&dvp_redirect=2&dvp_blk=1&dvp_psf=0]]></VerificationParameters></Verification></AdVerifications></Extension></Extensions></Wrapper></Ad></VAST>



Error: 

           [ima.loader.AdXmlFetcher] Failed to load ad request URL. Error: 6

  • On Chrome:

Access to XMLHttpRequest at 'https://bid.g.doubleclick.net/dbm/vast?dbm_c=AKAmf-B4MT_IXUHZ_a_5LCrZBl_YBJWQa3-xOon5yGMZgk1XaT5Y-WDU5S-B9u9ltL3OtR00Tf0LwBjjq0YWM4u07uF5Bj9i_g&sdkv=h.0.0.0&osd=2&frm=2&vis=1&sdr=1' from origin 'https://35a5072c71b6431efe9c2af4ceadb6b4.safeframe.googlesyndication.com' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. Error on browser dev tool console GET https://bid.g.doubleclick.net/dbm/vast?dbm_c=AKAmf-B4MT_IXUHZ_a_5LCrZBl_YBJWQa3-xOon5yGMZgk1XaT5Y-WDU5S-B9u9ltL3OtR00Tf0LwBjjq0YWM4u07uF5Bj9i_g&sdkv=h.0.0.0&osd=2&frm=2&vis=1&sdr=1 net::ERR_FAILED outstream.min.js:582 Uncaught Error: lima_error_fetching_ad: Failed to request ads: Http response at 400 or 500 level. .... AdsLoader error: AdError 1009: The VAST response document is empty.

  • On Safari:

[Error] Origin https://imasdk.googleapis.com is not allowed by Access-Control-Allow-Origin. [Error] XMLHttpRequest cannot load https://bid.g.doubleclick.net/dbm/vast?dbm_c=AKAmf-B_5LUPQX1P0YJgcOU7fvFj3D-ON7Hk9UQbTh1QEN156FuS8abJtgh3jcp5dKyhQ1JIR-PkFt_1ovf_znpDiltmCyeK4w&vpa=click&vpmute=1&sdkv=h.3.452.0&osd=2&frm=1&vis=1&sdr=1&is_amp=0&hl=en&u_so=p&ctv=0&mpt=videojs-ima&mpv=1.8.3&sdki=44d&adk=606341055&sdk_apis=2%2C8&sid=99FED5E1-5888-47BC-B11B-F100826248EC&eid=44726392&url=https%3A%2F%2Fwww.24h.com.vn%2Fbong-da%2Fket-qua-bong-da-europa-league-slavia-praha-arsenal-3-ban-6-phut-cu-dup-ngoi-sao-c48a1243865.html&dlt=1618543067877&idt=49225&dt=1618543138728&ged=ve4_td71_tt71_pd71_la2000_er798.0.798.0_vi563.0.1198.375_vp0_ts1_eb16619 due to access control checks. [Error] Failed to load resource: Origin https://imasdk.googleapis.com is not allowed by Access-Control-Allow-Origin


Thank you,
Cảnh

IMA SDK

unread,
Apr 20, 2021, 4:15:17 AM4/20/21
to can...@opensource.com.vn, ima...@googlegroups.com
Hi Cảnh,

Thank you for reporting this. Upon testing, I wasn't able to reproduce the behavior on my end. Instead, I'm getting a different error "Ad error: AdError 1005: There was a problem requesting ads from the server. Caused by: Error: 6". With this, could you please check the VAST again, or provide another VAST that showing the reported issue?

Regards,
Google Logo
Teejay Wennie Pimentel
IMA SDK Team
 


ref:_00D1U1174p._5004Q2FZvRb:ref

can...@opensource.com.vn

unread,
Apr 20, 2021, 5:08:43 AM4/20/21
to Interactive Media Ads SDK
Hi Teejay,

Please open the browser's dev console. You will see the error shown there as in the photo attached!
Screen Shot 2021-04-20 at 16.07.29.png
Thank you,
Cảnh

IMA SDK

unread,
Apr 20, 2021, 11:05:21 AM4/20/21
to can...@opensource.com.vn, ima...@googlegroups.com
Hi Cảnh,

I work with Teejay and will assist you. I saw the error in Chrome devtools, even the extracted <VastAdTagUri> directly placed in the visual inspector received the same error. We have a guide to fixing this called Cross-Origin-Resource-Sharing (CORS) for VAST. Feel free to get back to us if this doesn't fix it for you.

Regards,

Google Logo
Aryeh Baker
IMA SDK Team
 


ref:_00D1U1174p._5004Q2FZvRb:ref

can...@opensource.com.vn

unread,
Apr 21, 2021, 9:28:19 PM4/21/21
to Interactive Media Ads SDK
Hi Aryeh,

Both of the VastAdTagUri(hosted on domain https://bid.g.doubleclick.net/) and ima library(hosted on domain https://imasdk.googleapis.com) so it is on Google, we can not apply the guide you have sent cause it's server stuff.
I guess it is on Google side?

Thank you,
Cảnh

IMA SDK

unread,
Apr 22, 2021, 4:26:13 AM4/22/21
to can...@opensource.com.vn, ima...@googlegroups.com
Hi Cảnh,

The guide that Aryeh provided you should be configurable where the VAST is hosted. You may contact your ad provider regarding this.

Regards,
Google Logo
Teejay Wennie Pimentel
IMA SDK Team
 


ref:_00D1U1174p._5004Q2FZvRb:ref

can...@opensource.com.vn

unread,
Apr 22, 2021, 4:49:11 AM4/22/21
to Interactive Media Ads SDK
Hello Teejay,

The vast uri hosted is on Google domain, please read carefully my previous message:


Both of the VastAdTagUri(hosted on domain https://bid.g.doubleclick.net/) and ima library(hosted on domain https://imasdk.googleapis.com) so it is on Google, we can not apply the guide you have sent cause it's server stuff.

So the domain bid.g.doublelick.net is not Google's domain?

Thank you,
Cảnh 

IMA SDK

unread,
Apr 22, 2021, 9:23:30 AM4/22/21
to can...@opensource.com.vn, ima...@googlegroups.com
Hi Cảnh,

This forum doesn't have visibility on how the server side setup is in https://bid.g.doubleclick.net/. I will bring this up with my team and we will get back to you as soon as possible.

Regards,

Google Logo
Aryeh Baker
IMA SDK Team
 


ref:_00D1U1174p._5004Q2FZvRb:ref

can...@opensource.com.vn

unread,
Apr 22, 2021, 9:58:22 PM4/22/21
to Interactive Media Ads SDK
FYI: The vast content I have captured and post as sample on the first post in this thread returned from Google Admanage(Premium account).

The domain doubclick.net owned by Google, that's why we can not apply the CORS fix for the request on it! It's all on Google side!

Thank you,
Cảnh

IMA SDK

unread,
Apr 23, 2021, 1:18:16 AM4/23/21
to can...@opensource.com.vn, ima...@googlegroups.com
Hi Cảnh,

Thank you for providing additional context. This has been raised to the rest of the team for further investigation. We'll let you know the soonest we have our investigation findings.

Regards,
Google Logo
Teejay Wennie Pimentel
IMA SDK Team
 


ref:_00D1U1174p._5004Q2FZvRb:ref

IMA SDK

unread,
May 3, 2021, 1:38:07 PM5/3/21
to can...@opensource.com.vn, ima...@googlegroups.com

Hi Cảnh,

My team circled back with this question:

Why is there a bid redirect in VAST when the intention of bid calls is server to server? As it stands now, bid domain is not configured to allow xhr requests.

cảnh nguyễn mạnh

unread,
May 3, 2021, 8:03:42 PM5/3/21
to IMA SDK, ima...@googlegroups.com
Hi Aryeh,

The sample vast was captured from our DFP Preroll, I believe it returns from AdExchange network.

Thank you!
Cảnh

mustafe ahmed dawaan

unread,
May 3, 2021, 9:35:34 PM5/3/21
to cảnh nguyễn mạnh, IMA SDK, ima...@googlegroups.com
--
You received this message because you are subscribed to the Google Groups "Interactive Media Ads SDK" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ima-sdk+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ima-sdk/CADEfjiQaXEvvmTB1wXY2jsDkkkf9aSZDqv33v_6wef0AwoO_hQ%40mail.gmail.com.

IMA SDK

unread,
May 3, 2021, 10:45:29 PM5/3/21
to can...@opensource.com.vn, ima...@googlegroups.com

Hi Cảnh,

 

I work with Aryeh.

 

Thank you for your response. I will forward this information with the team.

@mustafe
Do you have any concern related to IMA SDK? If so, please open a new thread for better tracking of issue.

Regards,

Google Logo
Michael Angelo Legaspi
IMA SDK Team
 


ref:_00D1U1174p._5004Q2FZvRb:ref

can...@opensource.com.vn

unread,
May 15, 2021, 6:02:07 AM5/15/21
to Interactive Media Ads SDK
 Hello team,

Is there any update for this issue?

Thank you,
Cảnh

IMA SDK

unread,
May 16, 2021, 10:47:56 PM5/16/21
to can...@opensource.com.vn, ima...@googlegroups.com

Hi Cảnh,

 

Thank you for coming back to us with regards to your concern.

 

Our team just got back also and believes that there seems to be no strange thing from retrieving the VAST response on your end. However, we would want to know the details of how you are making the request, as it could be unusual in some way that it doesn't need to be. Maybe then the team can point out something.

 

In that sense, may we ask for these additional information so we could investigate further:

  • Ad Tag URL you are using to replicate the issue
  • The project file implementation sample where this issue occurs
  • Screen recording of the behavior

 

Please send it to our testing alias imate...@gmail.com, and let us know once done.

Regards,

cảnh nguyễn mạnh

unread,
May 16, 2021, 10:56:00 PM5/16/21
to IMA SDK, ima...@googlegroups.com
Hello team,

Is there any individual email so I can send the production vast tag? 

IMA SDK

unread,
May 16, 2021, 11:15:24 PM5/16/21
to can...@opensource.com.vn, ima...@googlegroups.com

Hi Cảnh,

 

If the reply to author option is not properly working, please send it directly to this email imate...@gmail.com, it is our official email for receiving private information.

Regards,

Reply all
Reply to author
Forward
0 new messages