Implement parser-safe SSAT late binding by ChristianPavilonis · Pull Request #872 · IABTechLab/trusted-server

ChristianPavilonis · 2026-07-08T22:09:55Z

Summary

Implements parser-safe SSAT bid late binding using a lol_html-inserted opaque placeholder instead of raw </body byte scanning.
Adds EOF fallback handling for malformed HTML, including a minimal executable tail when <head> and </body> are missing.
Keeps full-document HTML post-processors on a bounded buffered path that sees final HTML, not placeholders.

File	Change
`crates/trusted-server-core/src/publisher_late_binding.rs`	Adds per-request bid placeholders, insertion tracking, and a streaming placeholder late binder with split-chunk detection, duplicate stripping, and held-tail cap enforcement.
`crates/trusted-server-core/src/html_processor.rs`	Adds bid injection modes, post-processing mode controls, reusable head bootstrap/post-processor helpers, and placeholder insertion from parser-confirmed body end tags.
`crates/trusted-server-core/src/publisher.rs`	Replaces raw body-close scanning with parser-safe late binding, EOF fallback, buffered post-processor late binding, cap enforcement, and auction collect/abandon handling.
`crates/trusted-server-core/src/lib.rs`	Exports the late-binding module.
`crates/trusted-server-core/benches/html_processor_bench.rs`	Updates benchmark config for the new HTML processor fields.
`docs/superpowers/specs/2026-07-08-ssat-publisher-streaming-parser-safe-design.md`	Adds the parser-safe SSAT streaming design spec.
`docs/superpowers/plans/2026-07-08-ssat-publisher-streaming-parser-safe-implementation-plan.md`	Adds the implementation plan for the design.

Closes #857

cargo test-fastly && cargo test-axum
cargo clippy-fastly && cargo clippy-axum
cargo fmt --all -- --check
JS tests: cd crates/trusted-server-js/lib && npx vitest run
JS format: cd crates/trusted-server-js/lib && npm run format
Docs format: cd docs && npm run format
WASM build: cargo build --package trusted-server-adapter-fastly --release --target wasm32-wasip1
Manual testing via fastly compute serve
Other: cargo test-cloudflare && cargo clippy-cloudflare

Implement parser-safe SSAT late binding

518fce7

ChristianPavilonis requested review from aram356 and prk-Jr July 8, 2026 22:59