Stored redirect-token table and open-redirect-safe short links #13

New issue

Open

opened 2026-06-23 23:15:13 +00:00 by rbrooks · 0 comments

rbrooks commented

2026-06-23 23:15:13 +00:00

Owner

Target release: v1.2.0

Add a short-link/redirect-token storage layer so that when SHORT_LINK_BASE_URL points at a redirect-only domain, tokens resolve only to stored WeatherBot-generated targets (or a tightly allowlisted set of external official/weather-media URLs). Avoid any generic unauthenticated open redirect.

Acceptance

Short-link/redirect-token table mapping token → stored canonical target.
outbound_url() can emit short redirect URLs when a redirect-only short domain is configured.
External URLs are returned unchanged unless explicitly allowlisted.
Redirect-token / open-redirect rejection tests.

Source: docs/ROADMAP.md → Notification Message Budget and Compact Link System.

**Target release:** v1.2.0 Add a short-link/redirect-token storage layer so that when `SHORT_LINK_BASE_URL` points at a redirect-only domain, tokens resolve **only** to stored WeatherBot-generated targets (or a tightly allowlisted set of external official/weather-media URLs). Avoid any generic unauthenticated open redirect. **Acceptance** - [ ] Short-link/redirect-token table mapping token → stored canonical target. - [ ] `outbound_url()` can emit short redirect URLs when a redirect-only short domain is configured. - [ ] External URLs are returned unchanged unless explicitly allowlisted. - [ ] Redirect-token / open-redirect rejection tests. Source: `docs/ROADMAP.md` → Notification Message Budget and Compact Link System.

rbrooks added the

labels

2026-06-23 23:16:43 +00:00

rbrooks added this to the v1.2.0 - Notification formatting milestone

2026-06-23 23:23:17 +00:00