From 73fb8d3a160d79b2e24707d4ecbf047afb13a3ca Mon Sep 17 00:00:00 2001
From: Demetrio Girardi <dgirardi@prebid.org>
Date: Wed, 29 Nov 2023 15:00:40 -0800
Subject: [PATCH] Core: add option to turn off `Sec-Browsing-Topics` header
 (#10776)

---
 src/adapters/bidderFactory.js             |   2 +-
 test/spec/unit/core/bidderFactory_spec.js | 112 ++++++++++++++--------
 2 files changed, 72 insertions(+), 42 deletions(-)

diff --git a/src/adapters/bidderFactory.js b/src/adapters/bidderFactory.js
index 8628f2c60a0..44775b4e241 100644
--- a/src/adapters/bidderFactory.js
+++ b/src/adapters/bidderFactory.js
@@ -457,7 +457,7 @@ export const processBidderRequests = hook('sync', function (spec, bids, bidderRe
       return Object.assign(defaults, ro, {
         browsingTopics: ro?.hasOwnProperty('browsingTopics') && !ro.browsingTopics
           ? false
-          : isActivityAllowed(ACTIVITY_TRANSMIT_UFPD, activityParams(MODULE_TYPE_BIDDER, spec.code))
+          : (bidderSettings.get(spec.code, 'topicsHeader') ?? true) && isActivityAllowed(ACTIVITY_TRANSMIT_UFPD, activityParams(MODULE_TYPE_BIDDER, spec.code))
       })
     }
     switch (request.method) {
diff --git a/test/spec/unit/core/bidderFactory_spec.js b/test/spec/unit/core/bidderFactory_spec.js
index f089059b65a..9dcdb627698 100644
--- a/test/spec/unit/core/bidderFactory_spec.js
+++ b/test/spec/unit/core/bidderFactory_spec.js
@@ -422,7 +422,15 @@ describe('bidderFactory', () => {
       });
 
       describe('browsingTopics ajax option', () => {
-        let transmitUfpdAllowed, bidder;
+        let transmitUfpdAllowed, bidder, origBS;
+        before(() => {
+          origBS = window.$$PREBID_GLOBAL$$.bidderSettings;
+        })
+
+        after(() => {
+          window.$$PREBID_GLOBAL$$.bidderSettings = origBS;
+        });
+
         beforeEach(() => {
           activityRules.isActivityAllowed.reset();
           activityRules.isActivityAllowed.callsFake((activity) => activity === ACTIVITY_TRANSMIT_UFPD ? transmitUfpdAllowed : true);
@@ -448,49 +456,71 @@ describe('bidderFactory', () => {
         });
 
         Object.entries({
-          'allowed': true,
-          'not allowed': false
-        }).forEach(([t, allow]) => {
-          it(`should be set to ${allow} when transmitUfpd is ${t}`, () => {
-            transmitUfpdAllowed = allow;
-            spec.buildRequests.returns([
-              {
-                method: 'GET',
-                url: '1',
-              },
-              {
-                method: 'POST',
-                url: '2',
-                data: {}
-              },
-              {
-                method: 'GET',
-                url: '3',
-                options: {
-                  browsingTopics: true
-                }
-              },
-              {
-                method: 'POST',
-                url: '4',
-                data: {},
-                options: {
-                  browsingTopics: true
+          'omitted': [undefined, true],
+          'enabled': [true, true],
+          'disabled': [false, false]
+        }).forEach(([t, [topicsHeader, enabled]]) => {
+          describe(`when bidderSettings.topicsHeader is ${t}`, () => {
+            beforeEach(() => {
+              window.$$PREBID_GLOBAL$$.bidderSettings = {
+                [CODE]: {
+                  topicsHeader: topicsHeader
                 }
               }
-            ]);
-            bidder.callBids(MOCK_BIDS_REQUEST, addBidResponseStub, doneStub, ajaxStub, onTimelyResponseStub, wrappedCallback);
-            ['1', '2', '3', '4'].forEach(url => {
-              sinon.assert.calledWith(
-                ajaxStub,
-                url,
-                sinon.match.any,
-                sinon.match.any,
-                sinon.match({browsingTopics: allow})
-              );
             });
-          });
-        });
+
+            afterEach(() => {
+              delete window.$$PREBID_GLOBAL$$.bidderSettings[CODE];
+            });
+
+            Object.entries({
+              'allowed': true,
+              'not allowed': false
+            }).forEach(([t, allow]) => {
+              const shouldBeSet = allow && enabled;
+
+              it(`should be set to ${shouldBeSet} when transmitUfpd is ${t}`, () => {
+                transmitUfpdAllowed = allow;
+                spec.buildRequests.returns([
+                  {
+                    method: 'GET',
+                    url: '1',
+                  },
+                  {
+                    method: 'POST',
+                    url: '2',
+                    data: {}
+                  },
+                  {
+                    method: 'GET',
+                    url: '3',
+                    options: {
+                      browsingTopics: true
+                    }
+                  },
+                  {
+                    method: 'POST',
+                    url: '4',
+                    data: {},
+                    options: {
+                      browsingTopics: true
+                    }
+                  }
+                ]);
+                bidder.callBids(MOCK_BIDS_REQUEST, addBidResponseStub, doneStub, ajaxStub, onTimelyResponseStub, wrappedCallback);
+                ['1', '2', '3', '4'].forEach(url => {
+                  sinon.assert.calledWith(
+                    ajaxStub,
+                    url,
+                    sinon.match.any,
+                    sinon.match.any,
+                    sinon.match({browsingTopics: shouldBeSet})
+                  );
+                });
+              });
+            });
+          })
+        })
       });
 
       it('should not add bids for each placement code if no requests are given', function () {