Repository navigation
Conversation
|
Preview deployment for your docs. Learn more about Mintlify Previews.
💡 Tip: Enable Automations to automatically generate PRs for you. |
|
Preview deployment for your docs. Learn more about Mintlify Previews.
💡 Tip: Enable Automations to automatically generate PRs for you. |
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Want higher recall? High effort reviews run extra passes and find more bugs. A team admin can switch effort levels in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 577769f. Configure here.
| "=" + | ||
| encodeURIComponent(JSON.stringify(utm)) + | ||
| cookieAttributes(); | ||
| } |
There was a problem hiding this comment.
Attribution cookie ignores tracking preferences
Medium Severity
kernel_utm is a 30-day attribution cookie written and later appended to dashboard links without checking Do Not Track or c15t marketing consent. conceptual.js already gates the dashboard attribution handoff on those signals, and the privacy policy says advertising and attribution cookies honor DNT.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit 577769f. Configure here.


Adds
utm.js, which saves first-touch UTM params to thekernel_utmcookie and appends them todashboard.onkernel.comlinks on click. Launch posts link straight to docs pages, so the params were lost before sign-up.To test, open
/browsers/code-mode-webmcp?utm_source=x&utm_medium=social&utm_campaign=code-modeand click Sign up: the params are on the URL. Without params, links are unchanged.Pairs with the UTM passthrough in kernel/website, which writes the same cookie.
Note
Low Risk
Client-side marketing attribution only; sets a first-party cookie and rewrites outbound dashboard URLs with no server or auth impact.
Overview
Adds
utm.jsto the Mintlify docs so launch traffic that lands on docs with UTM query params still reaches dashboard sign-up with attribution.On load, the script captures first-touch
utm_*values into the sharedkernel_utmcookie (30-day,kernel.shdomain when applicable, host-only for local preview). It does not overwrite an existing cookie, matching the website behavior.On click and middle-click (capture phase), it rewrites links to
dashboard.onkernel.comto append stored UTMs when the destination URL does not already includeutm_params.Reviewed by Cursor Bugbot for commit 577769f. Bugbot is set up for automated code reviews on this repo. Configure here.