Closed
Description
s_cid is the default campaign tracking code for Adobe Site Catalyst. Based on an official blog post and third-party documentation though it does seem like it can be used for very granular tracking.
These sites have examples of it being used in the wild:
- https://kauffmanmuseum.org/exhibitions/travelingexhibits/vapes-exhibit/research-documents/
- https://seclists.org/fulldisclosure/2018/Jul/63
Since there are lots of examples of this parameter being used as a high-entropy ID, I think it would be preferable to block.