From 077084ad45fc4a9139c8b3f2abd67ef3dfc6ce64 Mon Sep 17 00:00:00 2001 From: hzrd149 Date: Wed, 1 May 2024 16:49:15 -0500 Subject: [PATCH] add requirement for redirects to include sha256 hash --- buds/bud-01.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/buds/bud-01.md b/buds/bud-01.md index 6ab807d..b30ff25 100644 --- a/buds/bud-01.md +++ b/buds/bud-01.md @@ -98,6 +98,9 @@ The `GET /` endpoint MUST return the contents of the blob with the `Cont The endpoint MUST accept an optional file extension in the URL. ie. `.pdf`, `.png`, etc +If the endpoints returns a 301 or 302 redirect it MUST redirect to a URL containing the same sha256 hash as requested blob. +This ensures that if a user was to copy or reuse the redirect URL it would still contain the original sha256 hash + #### Get Authorization (optional) The server may optionally require authorization when fetching blobs from the `GET /` endpoint