checked how the vibecoded video site does activitypub fetches. it does follow redirects, and it downloads the resource before checking whether it's too large
0 Boosts
0 Likes
@scanlime do they expand compressed responses too?
@emily_s haha good question, probably, i will look...
while i was waiting for nodejs source to download, noticed a bug in the vibe thing's fetch... they resolve DNS once to check if a fetch is a private IP, but then resolve it again to do the fetch. a server with multiple IPs could have one of them public and one private, and try to forge internal http requests. i know there's loads of stuff on localhost that shouldn't be.
they've hit my site like 16000 times since i set up a redirect for them, and if i understand their setup right this should be a noticeable chunk of their bandwidth quota... i wonder if the admin will notice? they were busy vibecoding more features today.