DFP XSS Vulnerabilites with Vendor Files


As of 12/21/2017, Northstar Travel Group will no longer be accepting certain vendor tags due to security reasons, as advised by DoubleClick for Publishers (DFP). The server itself has disabled these vendors where possible and their files are being removed off our servers- as such, we cannot accept 3rd party tags from the following vendors:

  • Adform
  • Admotion
  • Bonzai
  • Exponential
  • Eyeblaster
  • Eyewonder
  • Flashtalking
  • iPinyou
  • Jivox
  • Mediaplex
  • Mixpo
  • Predicta
  • Rockabox
  • Liquidus
  • Controbox
  • Spongecell
  • Unicast
  • Adrime
  • Revjet
  • Kpsule

For further reading, please refer to the official help article from DoubleClick for Publishers (DFP):


We thank you for your cooperation.

  • Digital Production Department, Northstar Travel Group