travel tourism

English

s_sq

Ddup

ARRAffinity

s_tbm

kndctr_664516D751E565010A490D4C_AdobeOrg_consent

_ga_TRMHFGCEBP

ASP.NET_SessionId

AMCVS_664516D751E565010A490D4C%40AdobeOrg

kndctr_664516D751E565010A490D4C_AdobeOrg_cluster

ARRAffinitySameSite

adobeujs-optin

Ddup_pv

AMCV_664516D751E565010A490D4C%40AdobeOrg

OptanonConsent

OptanonAlertBoxClosed

kndctr_664516D751E565010A490D4C_AdobeOrg_identity

s_campaign

s_ecid

Within the commercial generic top-level domain (.com), 'giving.marriott.com' is registered, featuring subdomain 'giving'. The second-level label 'marriott' is 8 characters long with three vowels and five consonants. Segmentation suggests 1 word: marriott. No strong language cues emerged from the frequency lists.

PartnerIdentifier

ClientIdentifier

emailRequired

RelayState

html/c5/b6/c5b6ebb9-0651-4d8b-b5fd-099293f66ebe.html.gz

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:138:0

ebe9283edd021ea03c0109c12d4fe01fc351d77524548c247af96d26e055fb7f

793ef6b9e5b18fbaf12cc866bda025602777565541237438fe023c363159d0d2

9e69a099dec8409b34fa97fd55f9635e705a8c389fede550f157b7751cbea559

0bbc9952e5b0f993e9e3aea32762ce83e790434690557e5272a0dc0574e5b66c

7db8d077fc21c20f1449a2603d524e423cfa25d7df6d5fd845a8e5e883aa227e

2a250e2f225e48cf583d54a0a42d623c700847de17323bf23ea372e5d9e89cb2

08cd0eca0e9a2cfca41cec0a40a2b21f6232c006d6782ac2df7b6724120629d0

be90d9edcd24296555f7f7e95f9ae44dbf046452a50988cbd7b078728b4e1e24

681e0ab02a8db1623f61295bb154fdfd43d3d89f4bae339c2c2e29e2c271bead

ef203d33b59abd92fb1fc89f44b2f9ca367ab7f5fa38d39ededa4a3f2702f052

97ab422de02b0bff1ec232fddc38737b1bb94ec855ae522a4d40c880e0023556

bb6c956d8d80f904cc40d8dcb8fe3342237271d84fb48cb83b18f9a2da63588b

de1a8047684fd201c0d9a0a1d7e4c02221f7e34e8433fdd0940f30b1ecf4c957

20f8d32faa7f87f3630c2f96a094d9db3010fc5e2861c785a1efaeb411b2d742

71bab9ccc683df8bf7d1fbdf550183764f626e115d92e486640fdd820c9e3795

794450af2630a9e7f606acbc330c6701d1be08c6e29690a521ea5f327d337513

angular vulnerable to regular expression denial of service via the $resource service

angular vulnerable to regular expression denial of service via the angular.copy() utility

Angular (deprecated package) Cross-site Scripting

angular vulnerable to regular expression denial of service via the <input type="url"> element

AngularJS improperly sanitizes SVG elements

AngularJS allows attackers to bypass common image source restrictions

angular vulnerable to super-linear runtime due to backtracking

AngularJS Incomplete Filtering of Special Elements vulnerability

angular vulnerable to regular expression denial of service (ReDoS)

AngularJS Regular expression Denial of Service (ReDoS)

End-of-Life: Long term support for AngularJS has been discontinued as of December 31, 2021

d522ee2d62761add3a22fc2f6497b15556ed1a08d0688e4b5e350e9b9080f292

98c6fe38843aa6aba55cafd51aa51ed8f48590b2c75b5adc0669708fb02cb06a

8600c0022b343d84cd2f2b9a449dcb5b69c901f36510dd568450da033ba68c13

36e2e39eaebe18b7617051bd9ea18dda8ff4285dae2d1991675bf836d144977c

8b6c6bcbd53266620d6bce509a2be0588b55140d54ec011477c45bb3d0c15aa5

48557c2d6e54e07a3ae24895a7fc0c7fb644dc72188a2011c38192a28b35627c

6a71833bcababb5360355576989344a03aa1ba5f5247ba3d47d3cad4477d9d61

3a3bbcaa56dfecc91156422abb25258e4ae262afce91b5ddbf874f85044ac42e

fbbef263871c3a62bdf007f491dd709a797ee791ee0bc64c26b7c2099bcd08d9

0f749e20b516df629e223425682f409eddf500414696cbc3e3e4561319e89965

fa61bbbf216e77f9dbd15345c85e03f2de354ca7248b971738041aa11963a353

91f9c1ddc42aa6be92f77d8208b60dc0930a28d623638404824e9f2d3a8e4f76

7c76e5c0c635271bef201916a6d4a59e72b46ac36b49bad3ccf2320ea3d46d4b

ec4af31df5fdac3cea2cf04b5ca87218ce39efbdfaa1982f2ad9916a3e281358

6df3f3dd532209e0d8e1149d73467e65b4419f905dd25e4034bb0c937861f1da

d372b69e73aab9ce8f825c4f59f7c0946e2e70a935cb77ed7cb904b4147e1612

19f24afd0fb06added09667771e1d68b2b5251f3e7565529a5f96e639c28f37a

a272f1e9ce9a5ba59959e2a21b45018311515ae020331f934145e7684c0b4c2d

441aaa3d7100151b74a9d6be1de7f92b4e8da0a26f17c7d5780b9a8b1b4b3e32

b4340ce02ba84b427717adb880205301542abef41b9109926739d85a9f8e943a

f9817768af414e90503e58341c02ab61c318d2d91b9df2cc2093b56130fa8e8a

31f516c2c0d9c66642c6d423b7f3b204ca5609ee896785476b341a1b4ee679ca

3ea6b36f6e2b9f01f91341f9f25199748f7532344feb9358e5b30f520f2c0838

.st0 { fill: #FF9662; } .st1 { fill: #1c1c1c; }

width=device-width, initial-scale=1.0, minimum-scale=1

viewport

CSC Corporate Domains, Inc.

MARRIOTT.COM

NOC United States

ipadmin

Akamai Technologies, Inc.

Steven Jay Schecter

AKAMAI


            (function (w, d, s, l, i) {
                w[l] = w[l] || []; w[l].push({
                    'gtm.start':
                        new Date().getTime(), event: 'gtm.js'
                }); var f = d.getElementsByTagName(s)[0],
                    j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src =
                        'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f);
            })(window, document, 'script', 'googleDataLayer', 'GTM-P938S8V');


    var dataLayer = {
      "site_id": "Giving",
      "event": "Pageview",
      "attributes": {
        "clientID": "Marriott"
      }
    };
  


        (function (window) {
            window.__env = window.__env || {};

            window.__env.changeCountryUrl = 'http://mrgiving.com/';
            window.__env.itemImageUrl = 'https://www.products-hq.com/rdbhq/extract/resize.htm';
        }(this));
  

<div class="featured-charities-list" ng-controller="FeaturedCharitiesCtrl as featuredCharities">
    <div class="category collapsed" id="cat-nurture" expand-collapse>
      <div class="cat-header toggleButton">
        <div class="logo">
          <img src="/Content/Images/Nurture.png" alt="Nurture">
        </div>
        <div>
          <span class="expander">Donate&nbsp;<i class="fa fa-chevron-down"></i></span>
          <span class="collapser">Close&nbsp;<i class="fa fa-chevron-up"></i></span>
        </div>
      </div>
      <div class="cat-content toggleContent">
        <div class="cat-description">
          <h2>Nurture Our World</h2>
          <p>
            We believe in making the communities where we operate better places to live, work and visit. To support the resiliency and sustainable development of these communities, we invest in the vitality of their children and natural resources,
            as well as deliver aid and support, especially in times of need.
          </p>
        </div>
        <div class="cat-items">
          <div class="charity" ng-repeat="charity in featuredCharities.featuredCharities | filter: { Category: 'nurture'} : true | orderBy : 'CharityName'">
            <a href="thumbnail#/?beneficiaryId={{charity.BeneficiaryId}}&provider={{charity.ProviderType}}">
              <div class="logo" ng-cloak>
                <img ng-src="{{charity.LogoHome}}" alt="{{charity.CharityName}}">
              </div>
            </a>
          </div>
        </div>
      </div>
    </div>
    <div class="category collapsed" id="cat-sustain" expand-collapse>
      <div class="cat-header toggleButton">
        <div class="logo">
          <img src="/Content/Images/Sustain.png" alt="Sustain">
        </div>
        <div>
          <span class="expander">Donate&nbsp;<i class="fa fa-chevron-down"></i></span>
          <span class="collapser">Close&nbsp;<i class="fa fa-chevron-up"></i></span>
        </div>
      </div>
      <div class="cat-content toggleContent">
        <div class="cat-description">
          <h2>Sustain Responsible Operations</h2>
          <p>
            We have an even greater obligation to operate responsibly with our expanding global presence. While integrating sustainability across our value chain and mitigating climate-related risk, we are working to reduce our environmental impacts,
            build and operate sustainable hotels and source responsibly.
          </p>
        </div>
        <div class="cat-items">
          <div class="charity" ng-repeat="charity in featuredCharities.featuredCharities | filter: { Category: 'sustain'} : true | orderBy : 'CharityName'">
            <a href="thumbnail#/?beneficiaryId={{charity.BeneficiaryId}}&provider={{charity.ProviderType}}">
              <div class="logo" ng-cloak>
                <img ng-src="{{charity.LogoHome}}" alt="{{charity.CharityName}}">
              </div>
            </a>
          </div>
        </div>
      </div>
    </div>
    <div class="category collapsed" id="cat-empower" expand-collapse>
      <div class="cat-header toggleButton">
        <div class="logo">
          <img src="/Content/Images/Empower.png" alt="Empower">
        </div>
        <div>
          <span class="expander">Donate&nbsp;<i class="fa fa-chevron-down"></i></span>
          <span class="collapser">Close&nbsp;<i class="fa fa-chevron-up"></i></span>
        </div>
      </div>
      <div class="cat-content toggleContent">
        <div class="cat-description">
          <h2>Empower Through Opportunity</h2>
          <p>
            As one of the world’s leading travel companies, we partner with leading nonprofits to foster workplace readiness and access to opportunity.
          </p>
        </div>
        <div class="cat-items">
          <div class="charity" ng-repeat="charity in featuredCharities.featuredCharities | filter: { Category: 'empower'} : true | orderBy : 'CharityName'">
            <a href="thumbnail#/?beneficiaryId={{charity.BeneficiaryId}}&provider={{charity.ProviderType}}">
              <div class="logo" ng-cloak>
                <img ng-src="{{charity.LogoHome}}" alt="{{charity.CharityName}}">
              </div>
            </a>
          </div>
        </div>
      </div>
    </div>
    <div class="category collapsed" id="cat-welcome" expand-collapse>
      <div class="cat-header toggleButton">
        <div class="logo">
          <img src="/Content/Images/Welcome.png" alt="Welcome">
        </div>
        <div>
          <span class="expander">Donate&nbsp;<i class="fa fa-chevron-down"></i></span>
          <span class="collapser">Close&nbsp;<i class="fa fa-chevron-up"></i></span>
        </div>
      </div>
      <div class="cat-content toggleContent">
        <div class="cat-description">
          <h2>Welcome All and Advance Human Rights</h2>
          <p>
            Travel is one of the most powerful tools for promoting peace and cultural understanding. With the goal of creating a safe, welcoming world for all, we rally for pro-travel policies and support programs that allow people to experience and understand other cultures. Through nonprofit partnerships, we are working to help create and implement training, advocacy, and supplier accountability.
          </p>
        </div>
        <div class="cat-items">
          <div class="charity" ng-repeat="charity in featuredCharities.featuredCharities | filter: { Category: 'welcome'} : true | orderBy : 'CharityName'">
            <a href="thumbnail#/?beneficiaryId={{charity.BeneficiaryId}}&provider={{charity.ProviderType}}">
              <div class="logo" ng-cloak>
                <img ng-src="{{charity.LogoHome}}" alt="{{charity.CharityName}}">
              </div>
            </a>
          </div>
        </div>
      </div>
    </div>
  </div>
  <div class="about-lovetravels">
    <div>
      <img src="/Content/Images/LoveTravelsLogoBlack.png" />
      <p>
        LoveTravels is Marriott’s platform that amplifies our Serve 360 commitments to welcoming all, social impact, and sustainability. We believe that love travels when we take action to shape a better world.
      </p>
      <a class="btn" href="https://www.marriottbonvoylovetravels.com/" target="_blank">Learn More</a>
    </div>
  </div>


  try {
    Typekit.load({
      async: true
    });
  } catch (e) { }


_satellite["_runScript1"](function(event, target, Promise) {
/** Consent | Trigger | Marketing & Analytics - REVISION 36 (Patch: OneTrust not defined)
   * Waits until the OneTrust object and its getGeolocationData method are available.
   * @param {number} timeoutMs - Max time to wait in milliseconds.
   * @param {number} intervalMs - Polling interval in milliseconds.
   * @returns {Promise<typeof window.OneTrust>}
   */
  function waitForOneTrust(timeoutMs = 10000, intervalMs = 50) {
    return new Promise((resolve, reject) => {
      const start = Date.now();

      const hasApi = () =>
        typeof window.OneTrust === 'object' &&
        window.OneTrust !== null &&
        typeof window.OneTrust.getGeolocationData === 'function';

      if (hasApi()) {
        resolve(window.OneTrust);
        return;
      }

      const timer = setInterval(() => {
        if (hasApi()) {
          clearInterval(timer);
          resolve(window.OneTrust);
          return;
        }
        if (Date.now() - start > timeoutMs) {
          clearInterval(timer);
          reject(
            new Error(
              'Timed out waiting for OneTrust.getGeolocationData(). Ensure the OneTrust script is loaded.'
            )
          );
        }
      }, intervalMs);
    });
  }

  /**
   * Retrieves the user's country code via OneTrust geolocation data.
   * Returns a 2-letter ISO country code (e.g., "US"), or null if unavailable.
   * @param {number} timeoutMs
   * @param {number} intervalMs
   * @returns {Promise<string|null>}
   */
  async function getOneTrustCountryCode(timeoutMs = 10000, intervalMs = 50) {
    const ot = await waitForOneTrust(timeoutMs, intervalMs);

    // Call OneTrust API safely
    let geo;
    try {
      geo = ot.getGeolocationData && ot.getGeolocationData();
    } catch (err) {
      console.warn('OneTrust.getGeolocationData() threw an error:', err);
      return null;
    }

    // Common OneTrust shape includes { country: "US", ... }
    const code = geo && (geo.country || geo.Country || geo.countryCode);
    return typeof code === 'string' ? code.toUpperCase() : null;
  }

  // --- Example usage (async/await) ---

  (async () => {
    try {
      const countryCode = await getOneTrustCountryCode();
      console.log('OneTrust country code:', countryCode);
       if (countryCode != 'GB' && countryCode != 'UK'){
        
          window.adobe = window.adobe || {};
		  window.adobe.optIn = window.adobe.optIn || {};
		  adobe.optIn.approve(adobe.OptInCategories.ECID);
		  adobe.optIn.approve(adobe.OptInCategories.ANALYTICS);
		  adobe.optIn.complete();

        try {    
            var visitor = Visitor.getInstance ("664516D751E565010A490D4C@AdobeOrg",{

           trackingServer: "metrics.marriott.com",  //Same as s.trackingServer
           trackingServerSecure: "smetrics.marriott.com",  //Same as s.trackingServerSecure
           marketingCloudServer: "metrics.marriott.com",
           marketingCloudServerSecure: "smetrics.marriott.com",

        });
        } catch (e) {
          console.warn("Visitor/ECID not available:", e);
        }
       
        _satellite.track("fireAnalytics");
       }
    } catch (e) {
      console.error(e.message);
    }
  })();


/**
Wait for the existence of the OneTrust groups property in the OptanonConsent cookie.
Call Analytics and Marketing based on the groups values. 
 Example groups values from optAnonConsent cookie 1:1,3:0,4:0,6:0,
    1:1 - Required; should almost always be set to 1
    3:0 - Performance
    4:0 - Advertising/Marketing
    6:0 - Analytics 
    Having a value of 0 is opted out, value of 1 is opted in.
**/
function waitForConsentData(callback) {
  const interval = setInterval(() => {
    //  let optAnonConsentGroups = new URLSearchParams(_satellite.cookie.get('OptanonConsent')).get('groups');
    if (typeof OneTrust !== 'undefined' && OneTrust?.getGeolocationData){
        let optAnonConsentCountry = OneTrust.getGeolocationData();
        if (typeof optAnonConsentCountry !== 'undefined' && optAnonConsentCountry) {
          clearInterval(interval);
          callback();
        }
    }
  })
}

waitForConsentData(() => {
  if(mart.getGDPR("6:0").includes("optin")){
    _satellite.logger.warn("===CONSENT: OneTrust Groups includes 6:1 firing ANALYTICS");
    _satellite.track("fireAnalytics");
    
  }
  if(mart.getGDPR("4:0").includes("optin")){
    _satellite.logger.warn("===CONSENT: OneTrust Groups includes 4:1 firing MARKETING");
    _satellite.track("fireMarketing");
  }
  if(mart.getGDPR("3:0").includes("optin")){
    _satellite.logger.warn("===CONSENT: OneTrust Groups includes 3:1 firing FUNCTIONAL");
    _satellite.track("fireFunctional");
  }
});

function waitForAkamai(callback) {
  const interval = setInterval(() => {
    let akamaiCountry = _satellite.getVar('browser_akamai_loc_country');
    _satellite.logger.warn(`NOTICE: akamaiCountry ${akamaiCountry}`);
    if (typeof akamaiCountry !== 'undefined' && akamaiCountry != '') {
      clearInterval(interval);
      callback();
    }
  }, 1000); 
}

waitForAkamai(() => {
  _satellite.logger.warn("=== NOTICE: trigger fireUniversalNotice");
  _satellite.track("fireUniversalNotice");  
})
});


/*LOAD A SCRIPT WITH A CALLBACK FUNCTION*/
function launchLoadScriptCallback(a, c, b) {
    var d = document.getElementsByTagName("script"),
        e;
    b = d[0];
    for (e = 0; e < d.length; e++)
        if (d[e].src === a && d[e].readyState && /loaded|complete/.test(d[e].readyState)) try {
            c()
        } catch (g) {} finally {
            return
        }
    d = document.createElement("script");
    d.type = "text/javascript";
    d.async = !0;
    d.src = a;
    d.onerror = function() {
        this.addEventListener && (this.readyState = "loaded")
    };
    d.onload = d.onreadystatechange = function() {
        if (!this.readyState ||
            "complete" === this.readyState || "loaded" === this.readyState) {
            this.onload = this.onreadystatechange = null;
            this.addEventListener && (this.readyState = "loaded");
            try {
                c.call(this)
            } catch (g) {}
        }
    };
    b.parentNode.insertBefore(d, b)
}

/*SEND AN IMAGE REQUEST*/
function launchImage(src) {
    var c = new Image(0, 0);
    c.src = src;
    c.alt = "Tag";/*FOR ADR COMPLIANCE*/
    c.style.display = "none";
    return c
}

/*INCLUDE A NEW SCRIPT*/
function launchScript(src) {
    var newScript = document.createElement('script');
    newScript.type = 'text/javascript';
    newScript.src = src; //URL
    newScript.async = true;
    document.head.appendChild(newScript);
}

/*INCLUDE A NEW IFRAME*/
function launchIframe(src) {
    var iframe = document.createElement('iframe');
    iframe.style.display = "none";
    iframe.src = src;
    document.body.appendChild(iframe);
  
  /*IMPRESSION TRACKING*/
if (!window.impressionTrack) {
    /*Impression Tracking, such as used by Monetate to track CC ad impressions*/
    window.impressionTrack = function(a) {
        /*check for "s" object, if not found then put on timer*/
        var id = setInterval(frame, 10);

        function frame() {
            if (typeof s !== "undefined") {
                sendImpressionTrack(a);
                clearInterval(id);
            }
        }
    };
    window.sendImpressionTrack = function(a) {
        //build evar1 string
        var tempArray = "";
        var variableArray = [];
        var linkTrackVars = "";
        var linkTrackEvents = "";
        var events = "";
        var mtLoginStatus = "";
        /*cycle through events, evars, props*/
        if (typeof a != "undefined") {
            /*set login status*/
            if (dataLayer.mr_prof_authentication_state == "authenticated") {
                mtLoginStatus = "|evar22=logged in";
            } else if (dataLayer.mr_prof_authentication_state == "remembered") {
                mtLoginStatus = "|evar22=remembered";
            }
            a = a + mtLoginStatus;
            /*check capitalization of event, eVar, prop*/
            var regexE = /event/i;
            var regexV = /evar/i;
            var regexP = /prop/i;
            var regexL = /link/i;
            tempArray = a.split("|");
            tempArray.forEach(function(value) {
                /*test which variable type*/
                var varType = "";
                if (/^event/i.test(value) == true) {
                    varType = "event";
                } else if (/^evar/i.test(value) == true) {
                    varType = "eVar";
                } else if (/^prop/i.test(value) == true) {
                    varType = "prop";
                } else if (/^list/i.test(value) == true) {
                    varType = "list";
                }
                switch (varType) {
                    case "event":
                        var eventVal = value.replace(regexE, "event");
                        events = s.apl(events, eventVal, ",", 2);
                        /*grab only the event name in case there is an incrementor also passed*/
                        var eventName = value.split("=");
                        linkTrackVars = s.apl(linkTrackVars, "events", ",", 2);
                        linkTrackEvents = s.apl(linkTrackEvents, eventName[0], ",", 2);
                        break;
                    case "eVar":
                        /*split the evar and value*/
                        var varName = value.split("=");
                        linkTrackVars = s.apl(linkTrackVars, varName[0].replace(regexV, "eVar"), ",", 2);
                        s[varName[0].replace(regexV, "eVar")] = varName[1];
                        variableArray.push(varName[0].replace(regexV, "eVar"));
                        break;
                    case "prop":
                        /*split the prop and value*/
                        var propName = value.split("=");
                        linkTrackVars = s.apl(linkTrackVars, propName[0].replace(regexP, "prop"), ",", 2);
                        s[propName[0].replace(regexP, "prop")] = propName[1];
                        variableArray.push(propName[0].replace(regexP, "prop"));
                        break;
                    case "list":
                        /*split the prop and value*/
                        var listName = value.replace("=", "@@").split("@@");
                        linkTrackVars = s.apl(linkTrackVars, listName[0].replace(regexL, "list"), ",", 2);
                        s[listName[0].replace(regexL, "list")] = listName[1].replace(/\^/g, "|");
                        variableArray.push(listName[0].replace(regexL, "list"));
                        break;
                    default:
                        // add nothing
                }
            });
        }
        if (typeof visitor !== "undefined") {
            s.marketingCloudVisitorID = visitor.getMarketingCloudVisitorID();
        }
        s.origLTV = s.linkTrackVars;
        s.origEvents = s.events;
        s.events = events;
        s.linkTrackVars = linkTrackVars;
        s.linkTrackEvents = linkTrackEvents;
        s.tl(this, "o", "Impression View");

        /*clear impression specific variables*/
        variableArray.forEach(function(value) {
            s[value] = "";
        });
        s.events = s.origEvents;
        s.linkTrackEvents = "None";
        s.linkTrackVars = s.origLTV;
    };

} else {}
}


_satellite["_runScript2"](function(event, target, Promise) {
/*keep checking for TrustArc country code, when found place into dataLayer*/
var trusteCCCheck = setInterval(function() {
    if (typeof OneTrust !== "undefined" && typeof OneTrust.getGeolocationData !== "undefined") {
        clearInterval(trusteCCCheck);
      if (typeof dataLayer == "undefined"){dataLayer = {}}
      dataLayer.browser_akamai_loc_country=OneTrust.getGeolocationData().country.toUpperCase();
    }
}, 25)

/*for jobs.marriott.com add code to remove banner after I Agree button is clicked, to get around code conflict*/
/*var trusteIAgreeCheck = setInterval(function() {
    
    if (_satellite.getVar("page_domain_name").indexOf("jobs.marriott.com") != -1 && $("#truste-consent-button").length != 0) {
        $("#truste-consent-button").click(function() {
            $("#consent_blackbar").remove();
        });
    }
}, 25)*/



});

_satellite["_runScript3"](function(event, target, Promise) {
//console.log("mart functions created by Launch");
window.mart = (function() {
  'use strict';
  let user_country = "";
  
   function generateUUID() {
        return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function(c) {
            var r = Math.random() * 16 | 0, v = c == 'x' ? r : (r & 0x3 | 0x8);
            return v.toString(16);
        });
    }
  
    function getQueryParam(param) {
      const urlParams = new URLSearchParams(window.location.search);
      return urlParams.get(param);
    }

    /** Used to clean JSON object of empty attributes before it is sent to Analytics **/
    function cleanJSON(obj) {
        const newObj = {};
        Object.keys(obj).forEach(function(k) {
            if (obj[k] && typeof obj[k] === "object") {
                const value = cleanJSON(obj[k]);
                if (Object.keys(value).length != 0) {
                    newObj[k] = cleanJSON(obj[k]);
                }
            } else if (obj[k] != null && obj[k] != undefined) {
                newObj[k] = obj[k];
            }
        });
        return newObj;
    }

    function initConsentWithCountry() {
      try {
        // 1. Try OneTrust geolocation
        if (window.OneTrust && OneTrust.getGeolocationData) {
          user_country = OneTrust.getGeolocationData().country || "";
          if (user_country) {
            _satellite.logger.warn("CONSENT: usersCountry (OneTrust) = " + user_country);
            return user_country;
          }
        }

        // 2. Fallback to Akamai Launch var
        let akamaiCountry = _satellite.getVar("browser_akamai_loc_country");
        if (akamaiCountry) {
          user_country = akamaiCountry;
          _satellite.logger.warn("CONSENT: usersCountry (Akamai) = " + user_country);
          return user_country;
        }

        // 3. Default to US
        user_country = "US";
        _satellite.logger.warn("CONSENT: NO usersCountry found – defaulting to US");
        return user_country;
      } catch (e) {
        _satellite.logger.warn("CONSENT: country lookup failed: " + e.message);
        user_country = "US";
        return user_country;
      }
    }

   /*FIND GDPR CONSENT SETTING BASED UPON COMBINATION OF USER COUNTRY AND ONETRUST COOKIES
    Example groups values from optAnonConsent cookie 1:1,3:0,4:0,6:0,
    1:1 - Required; should almost always be set to 1
    3:0 - Performance
    4:0 - Advertising/Marketing
    6:0 - Analytics 
    Having a value of 0 is opted out, value of 1 is opted in.
    **/
    function getGDPR(group) {
      /*EU country array*/
      const euArray = _satellite.getVar('list.european_countries');
      var returnVal = "";
      let optGroups;
  
     function getOptanonConsentGroups() {
          const MAX_WAIT_TIME = 10000; // 10 seconds
          const CHECK_INTERVAL = 100; // 0.1 seconds
          let startTime = Date.now();
          let optAnonConsentGroups = new URLSearchParams(_satellite.cookie.get('OptanonConsent')).get('groups');

          if (!optAnonConsentGroups) {
              _satellite.logger.warn('MART CONSENT: NO OptanonConsent groups - Start getOptanonConsentGroups setInterval check');
              let intervalId = setInterval(() => {
                  optAnonConsentGroups = new URLSearchParams(_satellite.cookie.get('OptanonConsent')).get('groups');
                  if (!optAnonConsentGroups || Date.now() - startTime > MAX_WAIT_TIME) {
                      clearInterval(intervalId);
                    _satellite.logger.warn('MART CONSENT: FOUND OptanonConsent groups == '+optAnonConsentGroups);
                      return optAnonConsentGroups;
                  }
              }, CHECK_INTERVAL);
          } else {
              return optAnonConsentGroups;
          }
      }

      function getActiveGroups() {
        const MAX_WAIT_TIME = 10000; // 10 seconds
        const CHECK_INTERVAL = 100; // 0.1 seconds
        let startTime = Date.now();
        let otActiveGroups = window.OnetrustActiveGroups;

        if (typeof otActiveGroups=="undefined") {
          _satellite.logger.warn('MART CONSENT: NO OnetrustActiveGroups - Start setInterval check');
          let intervalId = setInterval(() => {
            otActiveGroups = window.OnetrustActiveGroups;
            if (typeof otActiveGroups!="undefined" || Date.now() - startTime > MAX_WAIT_TIME) {
              clearInterval(intervalId);
              _satellite.logger.warn('MART CONSENT: FOUND OnetrustActiveGroups = '+otActiveGroups);
              return otActiveGroups;
            }
          }, CHECK_INTERVAL);
        } else {
          initConsentWithCountry();
        }
      }

      /*check for onetrust cookie*/
      if (_satellite.cookie.get("OptanonConsent") != null && typeof group !="undefined") {
        _satellite.logger.warn('MART CONSENT: FOUND OptanonConsent cookie &&  = group !=undefined=== '+_satellite.cookie.get("OptanonConsent"));
          optGroups = getOptanonConsentGroups();
          if (optGroups != null && optGroups.includes(group)) {
              returnVal = "optout";
          } else {
              returnVal = "optin";
          }
      }else{
        let activeConsentGroups = getActiveGroups();
        _satellite.logger.warn('activeConsentGroups = getActiveGroups() = ' + activeConsentGroups);

        if (activeConsentGroups && (typeof activeConsentGroups === "string" || Array.isArray(activeConsentGroups))) {
            if (activeConsentGroups.includes("1")) {
                _satellite.logger.warn('activeConsentGroups not null, includes(group) = ' + activeConsentGroups.includes(group));
                if (activeConsentGroups.includes(group)) {
                    returnVal = "optout";
                } else {
                    returnVal = "optin";
                }
            } else {
                // groups exist but don't include "1" → rely on country
                initConsentWithCountry();
                if (user_country && euArray.indexOf(user_country) !== -1) {
                    returnVal = "optout";
                } else {
                    returnVal = "optin";
                }
            }
        } else {
            // fallback: no active groups at all → rely on country
            initConsentWithCountry();
                _satellite.logger.warn("CONSENT: euArray → " + euArray + " | user_country → " + user_country);
          
            if (user_country && euArray.indexOf(user_country) !== -1) {
                returnVal = "optout";
            } else {
                _satellite.logger.warn("CONSENT: no consent groups, using country fallback (OneTrust → Akamai → US)");
                returnVal = "optin";
            }
        }
      }
      _satellite.logger.warn("CONSENT:: window.mart " + group + " = " + returnVal);
      return returnVal;
    }

    function getCookie(name) {
      const cookies = document.cookie.split("; ");
      for (let c of cookies) {
        const [key, val] = c.split("=");
        if (key === name) return val;
      }
      return "";
    }
  
    function setCookie(name, value, days, domain) {
      let expires = ''; //session
      if (days) {
        const date = new Date();
        date.setTime(date.getTime() + days * 24 * 60 * 60 * 1000);
        expires = "expires=" + date.toUTCString() + ';';
      }
      const domainPart = domain ? `domain=${domain};` : '';
      const securePart = window.location.protocol === 'https:' ? 'Secure;' : '';
      document.cookie = `${name}=${value};${expires}${domainPart}path=/;${securePart}SameSite=None;`;
    }
  
    return {
        generateUUID: generateUUID,
        getQueryParam: getQueryParam,
        cleanJSON: cleanJSON,
        getGDPR: getGDPR,
        initConsentWithCountry: initConsentWithCountry,
        getCookie: getCookie,
        setCookie: setCookie
    };
})();
});

_satellite["_runScript4"](function(event, target, Promise) {
function generateUUID() {
    return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function(c) {
        var r = Math.random() * 16 | 0, v = c == 'x' ? r : (r & 0x3 | 0x8);
        return v.toString(16);
    });
}

let ddupVal = generateUUID();
function setDdupCookie(ddupVal) {
        var cookieDomain = location.hostname.substring(location.hostname.indexOf("marriott"));
        _satellite.cookie.set("Ddup", ddupVal, {
            expires: 7,
            domain: cookieDomain
        })
}
setDdupCookie(ddupVal);

let ddupValPV = generateUUID();
function setDdupPVCookie(ddupValPV) {
        var cookieDomain = location.hostname.substring(location.hostname.indexOf("marriott"));
        _satellite.cookie.set("Ddup_pv", ddupValPV, {
            expires: 7,
            domain: cookieDomain
        })
}
setDdupPVCookie(ddupValPV);
});

_satellite["_runScript5"](function(event, target, Promise) {

  "use strict";

  // =========================
  // CONFIG
  // =========================
  var HOST_MATCH = "www.marriott.com"; // exact only
  var OPTIN_DE_NAME = "user_optin_status_analytics";

  // Prevent repeated setConsent calls
  var consentSetPromise = null;

  function log() {
    try { (_satellite && _satellite.logger && _satellite.logger.warn ? _satellite.logger.warn : console.warn).apply(console, arguments); }
    catch (e) {}
  }

  function hasAlloy() {
    return typeof window.alloy === "function";
  }

  function getOptInStatus() {
    try {
      if (!window._satellite || typeof _satellite.getVar !== "function") return null;
      return _satellite.getVar(OPTIN_DE_NAME);
    } catch (e) {
      return null;
    }
  }

  function safeUrl(href) {
    try { return new URL(href, window.location.href); } catch (e) { return null; }
  }

  function shouldDecorateUrl(urlObj) {
    if (!urlObj) return false;
    if (!(urlObj.protocol === "http:" || urlObj.protocol === "https:")) return false;
    return urlObj.hostname === HOST_MATCH; // EXACT host match only
  }

  function ensureConsentIn() {
    /** Only attempt to set consent if opt-in has been granted in your DE
    var opt = getOptInStatus();

    if (opt !== "optin") {
      log("[ID-DECORATE] Consent not optin (DE:", OPTIN_DE_NAME, "=", opt, "). Skipping setConsent.");
      return Promise.resolve(false);
    }
    **/
    if (!hasAlloy()) {
      log("[ID-DECORATE] alloy missing — cannot setConsent.");
      return Promise.resolve(false);
    }

    // Idempotent: only set once per page
    if (consentSetPromise) return consentSetPromise.then(function () { return true; });

    consentSetPromise = window.alloy("setConsent", {
      consent: [{
        standard: "Adobe",
        version: "1.0",
        value: { general: "in" }
      }]
    })
      .then(function () {
        log("[ID-DECORATE] setConsent executed (general: in) because DE was optin.");
        return true;
      })
      .catch(function (err) {
        log("[ID-DECORATE] setConsent FAILED:", err);
        return false;
      });

    return consentSetPromise;
  }

  function decorateUrl(urlString) {
    return window.alloy("appendIdentityToUrl", { url: urlString })
      .then(function (result) {
        return (result && result.url) ? result.url : urlString;
      })
      .catch(function (err) {
        log("[ID-DECORATE] appendIdentityToUrl FAILED:", err);
        return urlString; // fail safe
      });
  }

  function updateAnchorHref(anchor, decoratedUrl) {
    try {
      anchor.setAttribute("href", decoratedUrl);
      anchor.href = decoratedUrl;
    } catch (e) {}
  }

  function navigate(decoratedUrl, target) {
    log("[ID-DECORATE] navigating:", decoratedUrl, "target:", target);

    // Preserve target behavior; add noopener/noreferrer where possible
    if (target && target !== "_self") {
      window.open(decoratedUrl, target, "noopener,noreferrer");
    } else {
      window.location.assign(decoratedUrl);
    }
  }

  function isModifiedClick(evt) {
    // Keep native new-tab/window gestures intact
    return evt.metaKey || evt.ctrlKey || evt.shiftKey || evt.altKey || evt.button === 1;
  }

  /**
   * Find a destination URL from:
   *  1) <a href="...">
   *  2) elements with data-href / href (non-anchor button patterns)
   *  3) <button formaction="..."> or <input formaction="...">
   */
  function findClickDestination(event) {
    var el = event.target;

    // 1) Normal anchors
    var anchor = el && el.closest ? el.closest("a[href]") : null;
    if (anchor && (anchor.getAttribute("href") || anchor.href)) {
      // Use resolved property where possible (handles &amp; properly)
      var href = anchor.href || anchor.getAttribute("href");
      return {
        type: "anchor",
        el: anchor,
        href: href,
        target: anchor.getAttribute("target") || "_self"
      };
    }

    // 2) Common button-like nav: data-href / href on non-anchors
    var btnLike = el && el.closest ? el.closest("button,[role='button'],input[type='button'],input[type='submit'],[data-href],[href]") : null;
    if (btnLike) {
      var dataHref = (btnLike.getAttribute && (btnLike.getAttribute("data-href") || btnLike.getAttribute("href"))) || null;
      if (dataHref) {
        return {
          type: "datahref",
          el: btnLike,
          href: dataHref,
          target: (btnLike.getAttribute && (btnLike.getAttribute("data-target") || btnLike.getAttribute("target"))) || "_self"
        };
      }

      // 3) Form submit controls with formaction
      var formaction = btnLike.getAttribute && btnLike.getAttribute("formaction");
      if (formaction) {
        return {
          type: "formaction",
          el: btnLike,
          href: formaction,
          target: (btnLike.getAttribute && (btnLike.getAttribute("formtarget") || btnLike.getAttribute("target"))) || "_self"
        };
      }
    }

    return null;
  }

  function intercept(event) {
    // Don’t break user-intended modified clicks
    if (isModifiedClick(event)) return;

    var dest = findClickDestination(event);
    if (!dest || !dest.href) return;

    // Ignore non-navigational schemes early
    if (/^(#|mailto:|tel:|javascript:)/i.test(dest.href)) return;

    var urlObj = safeUrl(dest.href);
    if (!shouldDecorateUrl(urlObj)) return; // only www.marriott.com exact

    if (!hasAlloy()) {
      log("[ID-DECORATE] alloy missing — cannot decorate.");
      return;
    }

    // Only intercept if DE says optin
    var optStatus = getOptInStatus();
    if (optStatus !== "optin") {
      log("[ID-DECORATE] Skipping decoration; DE not optin:", OPTIN_DE_NAME, "=", optStatus);
      // Do NOT preventDefault; let it navigate normally
      return;
    }

    // Intercept navigation: consent -> decorate -> navigate
    event.preventDefault();
    event.stopPropagation();

    ensureConsentIn()
      .then(function () {
        return decorateUrl(urlObj.toString());
      })
      .then(function (decorated) {
        log("[ID-DECORATE] decorated url:", decorated);

        // Update DOM if it was an anchor (helps copy/hover and subsequent clicks)
        if (dest.type === "anchor") updateAnchorHref(dest.el, decorated);

        // NOTE: In your pasted code you had navigate commented out.
        // If you want navigation to occur, keep this ON.
        navigate(decorated, dest.target);

        // If you still want a debug popup:
        // alert("[ID-DECORATE] decorated url: " + decorated);
      })
      .catch(function (err) {
        log("[ID-DECORATE] decoration flow FAILED:", err);
        // Fall back to original URL
        navigate(urlObj.toString(), dest.target);
      });
  }

  // Capture early; many frameworks fire navigation on pointerdown
  document.addEventListener("pointerdown", intercept, true);
  document.addEventListener("click", intercept, true);

  log("[ID-DECORATE] installed. alloy present?", hasAlloy(), "DE:", OPTIN_DE_NAME, "HOST_MATCH:", HOST_MATCH);

});

_satellite["_runScript6"](function(event, target, Promise) {
/*update the <html lang=> value to force a language for OneTrust*/
var domain = _satellite.getVar("page_hostname");
var domainList = {"marriottbonvoyasia.jp":"ja","marriottbonvoyasia.cn":"zh","marriottbonvoyasia.kr":"ko"};

if (domainList[domain]!==undefined){
  var b = document.querySelector("html");
  b.setAttribute("lang", domainList[domain]);
}
});

_satellite["_runScript7"](function(event, target, Promise) {
/*check for existing cookie*/
_satellite.logger.warn("PRE window.onetrustCookie = "+_satellite.cookie.get("OptanonConsent"));
if (_satellite.cookie.get("OptanonConsent") == undefined) {
    window.onetrustCookie = "false"
} else {
    window.onetrustCookie = "true"
}
_satellite.logger.warn("window.onetrustCookie = "+window.onetrustCookie);
_satellite.setVar("oneTrust_isNewUser",window.onetrustCookie);

if (_satellite.cookie.get("OptanonAlertBoxClosed") == undefined) {
    window.onetrustInteractionCookie = "false"
} else {
    window.onetrustInteractionCookie = "true"
}
});

_satellite["_runScript8"](function(event, target, Promise) {
function setCacheBustSrc() {
  let cacheBustSrc = "";
  //cacheBustSrc = "https://cache.marriott.com/aka-fonts/OneTrust/R25.india/oneTrust_test/scripttemplates/otSDKStub.js?" + Math.random()*10000000000000000;
  //cacheBustSrc = "https://cache.marriott.com/aka-fonts/OneTrust/R26/oneTrust_production/scripttemplates/otSDKStub.js?" + Math.random()*10000000000000000;
  cacheBustSrc = "https://cdn.cookielaw.org/scripttemplates/otSDKStub.js?" + Math.random()*10000000000000000;
  // _satellite.logger.warn("CONSENT: ONETRUST script = " + cacheBustSrc);
  return cacheBustSrc;
}

function setConsentScript(){
  let onetrustScript = document.createElement('script');
  onetrustScript.setAttribute('src', setCacheBustSrc());
  //Only use TEST version in PROD as of 09/16/25. "-test" is default.
  if (location.search.includes("test=onetrust")) {
      onetrustScript.setAttribute('data-domain-script', 'f6f2227d-5318-43ca-8e66-30acdeffa99f');     
  } else {
      onetrustScript.setAttribute('data-domain-script', 'f6f2227d-5318-43ca-8e66-30acdeffa99f-test');
  }
  onetrustScript.setAttribute('data-dLayer-name', 'dataLayerOneTrust');  
  onetrustScript.setAttribute('data-document-language', 'true');
  document.head.appendChild(onetrustScript);
}

setConsentScript();
});

_satellite["_runScript9"](function(event, target, Promise) {
_satellite.logger.warn("CONSENT BASE CALL user_optin_status = "+_satellite.getVar("user_optin_status"));
_satellite.logger.warn("CONSENT BASE CALL user_optin_status_analytics = "+_satellite.getVar("user_optin_status_analytics"));
_satellite.logger.warn("CONSENT BASE CALL user_optin_status_functional = "+_satellite.getVar("user_optin_status_functional"));
});

_satellite["_runScript10"](function(event, target, Promise) {
// RULE: Core | Consent (OneTrust) | Select Sites
// window.SPA = 1 is for taptastego.com/MCOSW/

function isOneTrustLoaded() {
  return (typeof OneTrust !== 'undefined' ? 1 : 0);
}

if (window.SPA || document.querySelectorAll('body > #root')?.length || location.search.includes('SPA=1')) { // delay / wait for Footer to render
  waitForFooter();
  spaEvents();
}

function defaultOneTrustLink() {
  /*look for server rendered footer link, set default if doesn't exist in DOM */
  let consentLinks = document.querySelectorAll('#teconsent');
  if (consentLinks.length === 0) {
    var onetrustLink = document.createElement('li');
        onetrustLink.setAttribute("id", "teconsent");
        onetrustLink.setAttribute("class", "teconsent-default-link"); // class can be used to remove link when a SPA is building dynamically
        document.body.appendChild(onetrustLink);
    // event343 = missing teconsent object / forced add
    if (typeof window.addEvents == 'undefined') {window.addEvents = []}
    addEvents.push("event343");

  } else if (consentLinks.length > 1) { 
    // remove the default if exists when a SPA initiates template render
    document.querySelector('.teconsent-default-link')?.remove()
  }
}
defaultOneTrustLink(); // called again inside addOneTrustModalLink(), delete default if SPA adds template links


// must be global use for SPA code: React/SalesForce -> use addOneTrustModalLink() when rendering templates
window.addOneTrustModalLink = function(){
  _satellite.logger.warn(`teconsent -> addOneTrustModalLink()`);

  // set the link content
  let content = OneTrust?.GetDomainData()?.CookieSettingButtonText;
  let linkText = typeof content === 'string' && content.trim() !== '' ? content : 'Tracking Preferences';
  
  let onetrustButton = document.createElement("a");
      onetrustButton.setAttribute("id", "ot-sdk-btn");
      onetrustButton.setAttribute("class", "ot-sdk-show-settings");
      onetrustButton.innerHTML = linkText;

  // check for multiple teconsent links
  const consentLinks = document.querySelectorAll("#teconsent");
  consentLinks.forEach((container, index) => {

    // check if has anchor
    let anchor = container.querySelector("a");
    if(!anchor){
      const buttonClone = onetrustButton.cloneNode(true);
      container.appendChild(buttonClone);
    }

    // anchor should already have content, but if exists without content
    let hasText = (container.innerText != '' ? 1 : 0);
    if (!hasText) {
      _satellite.logger.warn(`teconsent -> !hasText ->`, container);
      anchor.innerText = linkText;
    }

  });

  defaultOneTrustLink(); // delete 'default' if > 1 links rendered
  OneTrust.initializeCookiePolicyHtml();
}

/*MODIFY ONETRUST CSS*/
var checkModal = window.setInterval(modalExists, 500);

function modalExists() {
  let modal = document.getElementsByClassName("ot-c-host");
  let isOneTrustLoaded = (typeof OneTrust !== 'undefined' ? 1 : 0);

  if (modal && isOneTrustLoaded) {
    /*ADJUST THE ONETRUST CSS*/
    /*var style = document.createElement('style');
    style.innerHTML = '.ot-c-host {display: none;}';
    document.head.appendChild(style);*/
    
    addOneTrustModalLink(); // find each teconsent

    // ex. Bulgari - multiple #teconsent (mobile/desktop - React)
    const teLinks = document.querySelectorAll("#teconsent");
    teLinks.forEach(elem => {
      _satellite.logger.warn(`teconsent -> call setAnchor`, elem);
      setAnchor(elem)
    });

    function setAnchor(elem){
      let footerLink = elem.querySelector('a');
      if (footerLink) {
        footerLink.style.backgroundColor = "inherit";
        let theUrl = window.location.href;
        if (theUrl.indexOf("www.ritzcarlton.com/") > 0) {
            footerLink.style.color = "#bfbfbf";
        }
        footerLink.style.border = "0";
        footerLink.style.padding = "0em 0em";
        footerLink.style.display = "inline";
        footerLink.tabIndex = "0";
        footerLink.role = "link";
        footerLink.href = "javascript:void(0)";
      }
      clearInterval(checkModal);
     }
  }
}

let usrCountry = _satellite.getVar('browser_akamai_loc_country');
_satellite.logger.warn("ONETRUST usrCountry = " + usrCountry);
/*REMOVE BONVOY LOGO FOR SPECIFIC CIRCUMSTANCES*/
function bannerExists() {
    let banner = document.getElementById("onetrust-banner-sdk");
    usrCountry = _satellite.getVar('browser_akamai_loc_country');
    // let isOneTrustLoaded = (OneTrust !== 'undefined' ? 1 : 0);
    if (banner && usrCountry != '') { // && isOneTrustLoaded
        /*ADJUST THE ONETRUST CSS*/
        if (usrCountry.includes('IN')) {
            document.getElementById('onetrust-policy-text').innerText = 'By clicking “Accept All”, you consent to the collection, use, and storage of your Personal Data including cookies on your browser or device to enhance site navigation, analyze site usage, and deliver content and offers tailored to your interests. Rejecting any or all cookies could negatively affect your experience with our digital properties. Our digital properties are not intended for children, and we do not knowingly solicit or collect Personal Data from children under the age of 18. We request that children refrain from providing their Personal Data through our digital properties.';
        }
    }
}

// hide M logo on bulgari sites
if (window.location.hostname.includes('bulgari')) {
    var style = document.createElement('style');
    style.innerHTML = '#onetrust-consent-sdk img, .banner_logo {display: none !important;} ';
    document.head.appendChild(style);
}

var checkBanner = window.setInterval(bannerExists, 500);




// single page apps
function waitForFooter() {
  const CHECK_INTERVAL = 500; // ms
  const MAX_WAIT = 8000;     // (8 seconds)

  const start = Date.now();
  const intervalId = setInterval(() => {
    const footer = document.querySelector('footer');
    if (footer) {
      clearInterval(intervalId);
      _satellite.logger.log('teconsent: SPA Footer loaded');
      setTimeout(function(){ // allow time to finish FOOTER render
        addOneTrustModalLink()
      },1000)
      // spaEvents()
    }
    if (Date.now() - start > MAX_WAIT) {
      clearInterval(intervalId);
      _satellite.logger.warn('teconsent: SPA Footer did not load within time limit');
    }
  }, CHECK_INTERVAL);
}


function spaEvents() {
  _satellite.logger.warn('setup SPA Events');
  // Back / forward
  window.addEventListener("popstate", waitForFooter);

  const originalReplaceState = history.replaceState;
  history.replaceState = function () {
    const ret = originalReplaceState.apply(this, arguments);
// _satellite.logger.log('changed state: replaceState')
    waitForFooter();
    return ret;
  };
  
  // Patch pushState
  const originalPushState = history.pushState;
  history.pushState = function () {
    const ret = originalPushState.apply(this, arguments);
//_satellite.logger.log('changed state: pushState')
    waitForFooter();
    return ret;
  };
}

});

_satellite["_runScript11"](function(event, target, Promise) {
const GPC = (navigator.globalPrivacyControl || 0);
const isDomainIncluded = _satellite.getVar('fullStory_universal_optout_domains').some(domain => location.hostname.includes(domain));

function configGPC() {
  let country = "US";
  if (window.OneTrust && typeof OneTrust.getGeolocationData === "function") {
    let geo = OneTrust.getGeolocationData();
    if (geo && geo.country) country = geo.country;
  } else {
    let akamai = _satellite.getVar("browser_akamai_loc_country");
    if (akamai) country = akamai;
  }

  const sitelang = document.querySelector('html').getAttribute('lang');
  const isValid_lang = ['en-us','en-US','en'].includes(sitelang);
  const isValid_site = ['US'].includes(country);

  _satellite.logger.warn(`CONSENT:GPC -> ${sitelang}:${isValid_lang}|${country}:${isValid_site}`);

  if (isValid_lang && isValid_site) {
    _satellite.logger.warn("CONSENT:GPC -> OneTrust.RejectAll");
    window.consentSource = "default.non_eu";
    // trigger OneTrust Optout
    window.OneTrust.RejectAll();
  }
}

function isOneTrustLoaded() {
  return ( (typeof OneTrust !== 'undefined' && typeof OneTrust.getGeolocationData === "function" ) ? 1 : 0);
}

// only run if GPC is true
if (GPC && isDomainIncluded) {
  function OneTrustGPCupdate() {
    if (isOneTrustLoaded()) {
      configGPC();
      clearInterval(waitOnOneTrust);
    }
  }
  let waitOnOneTrust = window.setInterval(OneTrustGPCupdate, 100);
}
});

_satellite["_runScript12"](function(event, target, Promise) {
/************************************************************
 *  OneTrust Consent Analytics Tracking (Alloy Version)
 *  JE - 11/06/2025
 ************************************************************/

function buildConsentPayload(action, events, locationLabel) {
  const site_id      = _satellite.getVar("env_site_id") || "";
  const currencyCode = _satellite.getVar("prop_currency_type") || "USD";
  const propertyId   = _satellite.getVar("prop_marsha_code") || "";
  const pageName     = `${location.hostname}${location.pathname}`;

  const xdm = {
    eventType: "web.webinteraction.linkClicks",
    web: {
      webInteraction: {
        name: action,
        type: "other",
        linkClicks: { value: 1 }
      },
      webPageDetails: {
        name: pageName,
        URL: pageName
      }
    }
  };

  const data = {
    __adobe: {
      analytics: {
        currencyCode,
        prop5: site_id,
        prop71: _satellite.property.name,
        events,
        eVar1: `uri=${pageName}:loc=${locationLabel}:linkDescription=${action}`,
        eVar41: site_id,
        eVar100: propertyId,
        eVar164: locationLabel, // optout banner | footer
        eVar165: action,        // opt in/out to all, confirm my choices
        eVar192: pageName,
        linkType: "o",
        linkName: action
      }
    }
  };

  return { xdm, data };
}

/************************************************************
 *  sendConsentEvent — Alloy dispatcher (analytics datastream)
 ************************************************************/
window.sendConsentEvent = function (action, events, locationLabel = "footer") {
  try {
    const sendNow = () => {
      const payload = buildConsentPayload(action, events, locationLabel);
      
      if(action.includes("opt in to all")){
        //Ensure Demdex cookies are off if optedout
        alloy("setConsent", {
            consent: [{
              standard: "Adobe",
              version: "1.0",
              value: { general: "in" }
            }]
          });
      }

      // 🔹 Pull global datastream object (from Data Element)
      const datastreamObj = _satellite.getVar("global.datastream_id");
      const analyticsStream = datastreamObj.analytics;

      // 🔹 Construct Alloy options with edgeConfigOverrides

      alloy("sendEvent", {
        ...payload,
        edgeConfigOverrides: {
          datastreamId: analyticsStream
        }
      });
      
      _satellite?.logger?.info?.(
        `✅ Alloy event sent via analytics datastream: ${analyticsStream || "default"} | ${locationLabel} → ${action}`,
        { payload }
      );
    };

    const initialStatus = _satellite.getVar("user_optin_status_analytics");

    // ⏳ Delay for Accept-All race condition
    if (/opt in/i.test(action) && initialStatus !== "optin") {
      _satellite?.logger?.info?.(`Waiting for consent update before sending (${action})`);
      setTimeout(() => {
        const updated = _satellite.getVar("user_optin_status_analytics");
        if (updated === "optin") {
          sendNow();
        } else {
          _satellite?.logger?.warn?.(
            `Still blocked after delay: user_optin_status_analytics = ${updated}`
          );
        }
      }, 600);
    } else {
      sendNow();
    }
  } catch (err) {
    _satellite?.logger?.error?.("Error sending Alloy consent event:", err);
  }
};

/************************************************************
 *  OneTrust Modal (footer) Tracking
 ************************************************************/
function attachConsentTrackingModal() {
  document
    .querySelector("#ot-sdk-btn")
    ?.setAttribute("onclick", "sendConsentEvent('Tracking Preferences','event2','optout banner')");

  document
    .getElementById("accept-recommended-btn-handler")
    ?.setAttribute("onclick", "sendConsentEvent('opt in to all','event2,event321','optout banner')");

  document
    .querySelector(".ot-pc-refuse-all-handler")
    ?.setAttribute("onclick", "sendConsentEvent('opt out of all','event2,event320','optout banner')");

  document
    .querySelector(".save-preference-btn-handler")
    ?.setAttribute("onclick", "sendConsentEvent('confirm my choices','event2,event321','optout banner')");
}

/************************************************************
 *  GDPR Banner Detection + Wiring (optout banner)
 ************************************************************/
function attachConsentTrackingBanner() {
  const banner = document.getElementById("onetrust-banner-sdk");
  if (!banner) return;

  const rejectBtn = banner.querySelector("#onetrust-reject-all-handler");
  const acceptBtn = banner.querySelector("#onetrust-accept-btn-handler");

  if (rejectBtn && !rejectBtn.getAttribute("onclick")) {
    rejectBtn.setAttribute(
      "onclick",
      "sendConsentEvent('opt out of all','event2,event320','optout banner')"
    );
  }

  if (acceptBtn && !acceptBtn.getAttribute("onclick")) {
    acceptBtn.setAttribute(
      "onclick",
      "sendConsentEvent('opt in to all','event2,event321','optout banner')"
    );
  }
}

/************************************************************
 *  Observe for Banner + Modal Injection
 ************************************************************/
new MutationObserver((mutations, observer) => {
  const bannerReady = document.querySelector("#onetrust-banner-sdk .banner-actions-container");
  const modalReady  = document.getElementById("onetrust-pc-sdk");

  if (bannerReady) {
    attachConsentTrackingBanner();
  }

  if (modalReady) {
    attachConsentTrackingModal();
  }

  if (bannerReady && modalReady) observer.disconnect();
}).observe(document.body, { childList: true, subtree: true });
});

_satellite["_runScript13"](function(event, target, Promise) {
const domainsArr = [];
const isDomainIncluded = domainsArr.some(domain => location.hostname.includes(domain));

// isDomainIncluded - apply permissions on GTM containers outside of Launch
if (isDomainIncluded || window?.gtm_containers?.length){
  
window.DATA_LAYER_NAME = 'dataLayer';
if (typeof window.gtm_dataLayer === 'string') {
  window.DATA_LAYER_NAME = window.gtm_dataLayer; // site-defined GTM dataLayer name
}
window[window.DATA_LAYER_NAME] = window[window.DATA_LAYER_NAME] || [];
window.gtag = function () {window[window.DATA_LAYER_NAME].push(arguments);};

window._TAGS = {
  gtm: {
    isLoaded: 0,
    containerIds: window?.gtm_containers || [], // ['GTM-XXXXXXXX','GTM-XXXXXXXX']
    init: function(TEST) { // initial page load
      const perms = _TAGS.gtm.permissions.getOneTrust(TEST); // Should always be 'optout' unless 2nd+ page
      _TAGS.gtm.permissions.setGTM('default',perms);
    },
    update: function(TEST) { // OneTrust change event
      const perms = _TAGS.gtm.permissions.getOneTrust(TEST);
      _TAGS.gtm.permissions.setGTM('update',perms);
    },
    permissions: {
      getOneTrust: function(TEST) {
        let InOrOut_analytics = '';
        let InOrOut_marketing = '';

        if (TEST) {
          InOrOut_analytics = TEST;
          InOrOut_marketing = TEST;
        } else {
          InOrOut_analytics = _satellite.getVar('user_optin_status_analytics');
          InOrOut_marketing = _satellite.getVar('user_optin_status');
        }
        return {
          // "optin" | "optout" | undefined
          analytics: InOrOut_analytics, 
          marketing: InOrOut_marketing
        }
      },
      setGTM: function(setType,perms) {
        // Translate Launch values into Google Consent Mode values
        const analytics_storage = (perms.analytics === 'optin') ? 'granted' : 'denied';
        const ad_consent        = (perms.marketing === 'optin') ? 'granted' : 'denied';
        const permsObj = {
          analytics_storage: analytics_storage,
          ad_storage: ad_consent,
          ad_user_data: ad_consent,
          ad_personalization: ad_consent
        }

        window.gtag('consent', setType, permsObj);
        _satellite.logger.warn(`setGTM -> ${setType} perms`, permsObj);
        
        if (!_TAGS.gtm.isLoaded && _TAGS.gtm.containerIds.length > 0) { // !isGTM_externally_loaded
          // GTM tag(s) are loaded from this script code and not external to this functionality
          _TAGS.gtm.load();
        }
        
        // fire triggers for tags that need to run after consent changes: 'event': 'consentUpdated'
        // needs time for the permissions to get updated across GTM
        window.setTimeout(function() {
          window[window.DATA_LAYER_NAME].push({'event':'consentUpdated'})
        }, 1000);
      }
    },
    load: function() {
      window.gtm_containers.forEach(id => _TAGS.gtm.inject(id, window.DATA_LAYER_NAME));
      _TAGS.gtm.isLoaded = 1;
    },
    inject:  function(containerId, dataLayerName = window.DATA_LAYER_NAME) {
      const scriptId = `gtm-script-${containerId}`;
      if (document.getElementById(scriptId)) return;

      // Mirror GTM bootstrap behavior
      window[window.DATA_LAYER_NAME].push({
          'gtm.start': new Date().getTime(),
          event: 'gtm.js'
      });

      // Create GTM loader script
      const gtmScript = document.createElement('script');
      gtmScript.id = scriptId;
      gtmScript.async = true;

      const dl = window.DATA_LAYER_NAME !== 'dataLayer' ? `&l=${encodeURIComponent(window.DATA_LAYER_NAME)}` : '';
      gtmScript.src = `https://www.googletagmanager.com/gtm.js?id=${encodeURIComponent(containerId)}${dl}`;

      const firstScript = document.getElementsByTagName('script')[0];
      firstScript.parentNode.insertBefore(gtmScript, firstScript);
    }
  },
  waitForOneTrust: function(callback, timeout = 10000) {
    const start = Date.now();

    (function check() {
      if (window.OneTrust && typeof OneTrust.OnConsentChanged === 'function') {
          callback();
      } else if (Date.now() - start < timeout) {
          setTimeout(check, 100);
      } else {
          console.warn('OneTrust SDK not initialized after 10s');
      }
    })();
  }
}

// Hook into OneTrust CMP using callback
window._TAGS.waitForOneTrust(function () {
  
  // Fires on every page load once OneTrust finishes initializing (and on preference changes)
  OneTrust.OnConsentChanged(() => {
      _satellite.logger.log('OneTrust.OnConsentChanged -> _TAGS.gtm.update()');
      _TAGS.gtm.update() // THIS DOES NOT RUN UNLESS ONETRUST IS UPDATED
      _satellite.logger.log('Running callback for OneTrust.OnConsentChanged -> _TAGS.gtm.update()');
  });

  // Run immediately
  if (_TAGS.gtm.containerIds.length > 0){
      _TAGS.gtm.init(); // TEST = 'optout'
  } else {
      // GTM loaded outside this script
      _TAGS.gtm.update(); // TEST = 'optout'
  }
});
  
}
});

_satellite["_runScript14"](function(event, target, Promise) {
function checkOptanonConsent() {
    // Get all cookies as a string
    const cookies = document.cookie;
    // Check if OptanonConsent cookie exists
    const match = cookies.match(/(?:^|;\s*)OptanonConsent=([^;]*)/);
    if (!match) {
        // Cookie does not exist
        return false;
    }
    // Decode the cookie value
    const cookieValue = decodeURIComponent(match[1]);
    // Check if the value contains ",6:1"
    return cookieValue.includes(",6:1");
}

// Example usage:
_satellite.logger.warn("checkOptanonConsent() = "+checkOptanonConsent()); // true or false

if(checkOptanonConsent()){
  _satellite.logger.warn("checkOptanonConsent() TRUE");

  window.adobe = window.adobe || {};
  window.adobe.optIn = window.adobe.optIn || {};
  
  adobe.optIn.approve(adobe.OptInCategories.ECID);
  adobe.optIn.approve(adobe.OptInCategories.ANALYTICS);
  adobe.optIn.complete();

  try {    
      var visitor = Visitor.getInstance ("664516D751E565010A490D4C@AdobeOrg",{
   
     trackingServer: "metrics.marriott.com",  //Same as s.trackingServer
     trackingServerSecure: "smetrics.marriott.com",  //Same as s.trackingServerSecure

     //For CNAME support only. Exclude these variables if you're not using CNAME
     marketingCloudServer: "metrics.marriott.com",
     marketingCloudServerSecure: "smetrics.marriott.com",

     //Function variable
    // disableThirdPartyCalls: false
  
  });
    /**
     alloy("setConsent", {
        consent: [{
          standard: "Adobe",
          version: "1.0",
          value: { general: "in" }
        }]
      });
      **/

  } catch (e) {
    console.warn("Visitor/ECID not available:", e);
  }
}else{
  _satellite.logger.warn("checkOptanonConsent() FALSE");
  var visitor = Visitor.getInstance ("664516D751E565010A490D4C@AdobeOrg",{
     trackingServer: "metrics.marriott.com",  //Same as s.trackingServer
     trackingServerSecure: "smetrics.marriott.com",  //Same as s.trackingServerSecure

     //For CNAME support only. Exclude these variables if you're not using CNAME
     marketingCloudServer: "metrics.marriott.com",
     marketingCloudServerSecure: "smetrics.marriott.com",

     //Function variable
    // disableThirdPartyCalls: true
  });
}
});

_satellite["_runScript15"](function(event, target, Promise) {
document.addEventListener('click', function (event) {

  var customClickElement = event.target.closest('.custom_click_track');

  if (customClickElement) {
    /*build evar1 string*/
    var tempValue = "";
    var varValue = "";
    var tempEvents = "";
    var tempEvars = "";
    var tempProps = "";
    let eVar164 = "";
    let eVar165 = "";

    // declare property once at the start
    let property = _satellite.getVar('prop_marsha_code') || "";

    var customClickValue = customClickElement.getAttribute("custom_click_track_value") ||
      customClickElement.getAttribute("data-custom_click_track_value");

    if (
      customClickValue === null ||
      customClickValue === undefined ||
      customClickValue === "" ||
      customClickValue.trim() === "" ||
      customClickValue === "undefined"
    ) {
      return;
    }

    tempValue = customClickValue.split("|");

    varValue = "uri=" + location.hostname + location.pathname +
      ":loc=" + (tempValue[0] || "undefined") +
      ":linkDescription=" + (tempValue[1] || "undefined");

    // add eVar164 and eVar165 tied to location + description
    eVar164 = tempValue[0] || "";
    eVar165 = tempValue[1] || "";

    tempEvents = tempValue[4] || "undefined";

    // check if an internal or external link
    if (typeof tempValue != "undefined" && typeof tempValue[2] != "undefined" && tempValue[2].toLowerCase() != "zz") {
      /*send server call with data*/
      s.origLTV = s.linkTrackVars;
      s.origEvents = s.events;
      s.events = "event2";
      s.prop63 = "Click Tracking";
      s.prop71 = _satellite.property.name;
      s.eVar1 = varValue;
      s.eVar164 = eVar164;
      s.eVar165 = eVar165;
      s.eVar41 = s.prop5 = _satellite.getVar('env_site_id');
      s.eVar176 = _satellite.getVar('rnb_outlet_id');

      /*** ✅ Prioritize MARSHA from 4th param over dataLayer ***/
      let marshaFromAttr = "";
      if (typeof tempValue[3] !== "undefined" && tempValue[3].includes("product=")) {
        const tmpArr = tempValue[3].split(",");
        tmpArr.forEach(function (val) {
          if (val.includes("product=")) {
            marshaFromAttr = val.split("=")[1]; // value after product=
          }
        });
      }
      let marshaFinal = marshaFromAttr !== "" ? marshaFromAttr : property;

      if (marshaFinal !== "") {
        s.products = "ROOM;" + marshaFinal + ";;;;eVar100=" + marshaFinal;
      }

      s.linkTrackVars = "eVar1,eVar100,eVar41,eVar164,eVar165,eVar176,prop5,prop63,prop71,products,events";
      s.linkTrackEvents = "event2";

      /*check for additional events, evars, props*/
      if (typeof tempValue[3] != "undefined") {
        var regexE = /event/i;
        var regexV = /evar/i;
        var regexP = /prop/i;
        tempEvents = tempValue[3].split(",");
        tempEvents.forEach(function (value, index) {
          var varType = "";
          if (/event/i.test(value) == true) {
            varType = "event";
          } else if (/evar/i.test(value) == true) {
            varType = "eVar";
          } else if (/prop/i.test(value) == true) {
            varType = "prop";
          }
          switch (varType) {
            case "event":
              var eventVal = value.replace(regexE, "event");
              s.events = s.apl(s.events, eventVal, ",", 2);
              var eventName = value.split("=");
              s.linkTrackEvents = s.apl(s.linkTrackEvents, eventName[0], ",", 2);
              break;
            case "eVar":
              var varName = value.split("=");
              s.linkTrackVars = s.apl(s.linkTrackVars, varName[0].replace(regexV, "eVar"), ",", 2);
              s[varName[0].replace(regexV, "eVar")] = varName[1];
              break;
            case "prop":
              var propName = value.split("=");
              s.linkTrackVars = s.apl(s.linkTrackVars, propName[0].replace(regexP, "prop"), ",", 2);
              s[propName[0].replace(regexP, "prop")] = propName[1];
              break;
            default:
              // add nothing
          }
        });
      }

      let clickLog = `s.event=${s.events}*****s.linkTrackEvents=${s.linkTrackEvents}*****s.linkTrackVars=${s.linkTrackVars}`;
      _satellite.logger.log(clickLog)
      s.tl(this, "o", "Custom Link Click");
      s.event = s.origEvents;
      s.linkTrackEvents = "None";
      s.linkTrackVars = s.origLTV;
    } else {
      /*store in cookie to be captured on next page*/
      var extraVals = "";
      if (typeof tempValue[3] !== "undefined") {
        extraVals = "|" + encodeURIComponent(tempValue[3]);
      }
      document.cookie = "custom_click_track=" + varValue + extraVals + "; path=/";
    }
  }
}, false);
});

_satellite["_runScript16"](function(event, target, Promise) {
function insertBefore(t,e){e.parentNode.insertBefore(t,e)}function waitForFooter(){const t=500,e=8e3,a=Date.now(),o=setInterval((()=>{document.querySelector("#ccpacontainer")&&(clearInterval(o),_satellite.logger.log("ccpacontainer: SPA Footer loaded"),setTimeout((function(){addCCPALink()}),2e3)),Date.now()-a>e&&(clearInterval(o),_satellite.logger.warn("ccpacontainer: SPA Footer did not load within time limit"))}),t)}window.addCCPALink=function(){if(-1!==_satellite.getVar("page_domain_name").indexOf(".ritzcarlton.com")&&"en"!==document.documentElement.lang)return;const t=document.querySelectorAll("#teconsent"),e=document.querySelectorAll("#ccpacontainer");if(e.length>0)return void e.forEach((t=>{if(t.querySelector("#ccpalink"))return;const e=document.createElement("a");e.setAttribute("href","https://www.marriott.com/about/your-privacy-rights.mi"),e.setAttribute("id","ccpalink"),_satellite.getVar("page_domain_name").includes("renaissance")?e.innerHTML="<img src='https://cache.marriott.com/aka-fonts/ccpa/privacyoptions29x14.png' style='width: 15%;' data-src='https://cache.marriott.com/aka-fonts/ccpa/privacyoptions29x14.png' alt='Opt-out Icon' width='29' height='14'>&nbsp;Your Privacy Choices":e.innerHTML="<img src='https://cache.marriott.com/aka-fonts/ccpa/privacyoptions29x14.png' style='display:inline' data-src='https://cache.marriott.com/aka-fonts/ccpa/privacyoptions29x14.png' alt='Opt-out Icon' width='29' height='14'>&nbsp;Your Privacy Choices",t.appendChild(e)}));let a;t.length>0?(a=t[0].cloneNode(!1),a.removeAttribute("id"),a.removeAttribute("consent"),a.removeAttribute("style"),a.setAttribute("id","ccpacontainer"),a.innerHTML="<a href='https://www.marriott.com/about/your-privacy-rights.mi' id='ccpalink' style='color: inherit;'><img src='https://cache.marriott.com/aka-fonts/ccpa/privacyoptions29x14.png' data-src='https://cache.marriott.com/aka-fonts/ccpa/privacyoptions29x14.png' alt='Opt-out Icon' width='29' height='14' style='display:inline;'>&nbsp;Your Privacy Choices</a>"):(a=document.createElement("span"),a.setAttribute("id","ccpacontainer"),a.innerHTML="<a href='https://www.marriott.com/about/your-privacy-rights.mi' id='ccpalink'><img src='https://cache.marriott.com/aka-fonts/ccpa/privacyoptions29x14.png' data-src='https://cache.marriott.com/aka-fonts/ccpa/privacyoptions29x14.png' alt='Opt-out Icon' width='29' height='14' style='display:inline;'>&nbsp;Your Privacy Choices</a>"),_satellite.getVar("page_domain_name").includes("renaissance")&&(a.innerHTML="<a href='https://www.marriott.com/about/your-privacy-rights.mi' id='ccpalink'><img src='https://cache.marriott.com/aka-fonts/ccpa/privacyoptions29x14.png' style='width: 15%;' data-src='https://cache.marriott.com/aka-fonts/ccpa/privacyoptions29x14.png' alt='Opt-out Icon' width='29' height='14'>&nbsp;Your Privacy Choices</a>"),t.length>0?insertBefore(a,t[0]):document.body.appendChild(a)},window.addCCPALink(),window.SPA||document.querySelectorAll("body > #root")?.length||location.search.includes("SPA=1")?waitForFooter():addCCPALink();
});

_satellite["_runScript17"](function(event, target, Promise) {
var src="//insight.adsrvr.org/track/pxl/?adv=hbq9bjg&ct=0:uti0uav&fmt=3";launchImage(src);
});

Requests	IP Address	Location	AS Autonomous System
27	142.250.154.97	United States	AS15169Google LLC
24	23.52.181.12	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
24	23.96.187.5	Chicago, Illinois, United States	AS8075Microsoft Corporation
24	184.24.77.156	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
99	4	-	-

Security Scan Report: giving.marriott.com

Summary

AI Security Verdict

Low Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History