TCF enforcement module: Support for ACL vendor ids

[patmmccann]

Type of issue

feature

Description

The tcf module is capable of suppressing vendors when a gvlid is in their adapter and purpose consent for vendors is missing on some purpose. The googleVendorList could also easily be checked if a module owner is not on the TCF

To see an example go to https://highfivve.com/en/from-publisher-to-publisher/ and type in console:
__tcfapi('addEventListener', 2, function(tcData, success) { console.log('cmp responded:', tcData, success);});
and observe tcData.googleVendorConsents. This vendor list is described at https://support.google.com/admanager/answer/9681920?hl=en and available at
https://storage.googleapis.com/tcfac/additional-consent-providers.csv

<style> </style>

28831	Mobian	https://themobian.com/privacy/	js.outcomes.net js.outcomesx.net px.outcomes.net px.outcomesx.net px2.outcomes.net px2.outcomesx.net vast.outcomes.net

for example has https://github.com/prebid/Prebid.js/blob/master/modules/mobianRtdProvider.js and no GVL. It would be quite useful to examine cmp output for mobian vendor consent before allowing their processing.

Another example is

<style> </style>

2343	Viant	https://viantinc.com/privacy-policy/	cdn.viantsuite.com sdk.viantsuite.com viantinc.com

which has https://github.com/prebid/Prebid.js/blob/master/modules/viantOrtbBidAdapter.js

and AdRiver is id 46 and has https://github.com/prebid/Prebid.js/blob/master/modules/adriverBidAdapter.js and an id module as well