Security
Benoît H. Dicaire
3 min read
Accents, IDN, and short-link slugs
Why vanityURLs keeps short-link slugs ASCII-only while allowing normal HTTP(S) destination URLs.
Operations
Benoît H. Dicaire
3 min read
Do not turn every Cloudflare knob
Which Cloudflare dashboard features a vanityURLs instance should leave alone unless there is a specific operational reason.
Security
Benoît H. Dicaire
2 min read
Runtime security for a small redirector
Why vanityURLs keeps the Worker small, blocks raw runtime assets, and uses Cloudflare edge controls around the redirect path.
Security
Benoît H. Dicaire
3 min read
Protecting the reputation of a short-link domain
Why vanityURLs treats blocklist policy as part of operating a trustworthy short-link domain.
Security
Benoît H. Dicaire
3 min read
Keep scanner traffic out of the Worker
Why a vanityURLs instance should use Cloudflare edge controls before traffic reaches the Worker.
Security
Benoît H. Dicaire
2 min read
The current v8s architecture
How the current Worker, defaults, custom overrides, analytics, and Cloudflare security model fit together.