open-standards/wai/telemetry-conformance/invalid/url-with-query.json
Transaction Science 2f1c8effb8 wai telemetry: a content id is a hash or a short token; no URL query, fragment or credential
cid is the entry object's content hash (64 lowercase hex) or 1-64 of
[A-Za-z0-9._-], so it can hold no address, query or token. object.url is refused,
not stripped, when it has a query, a fragment or user information. Section 8 says
that neither a URL query nor a signed URL's token enters an observation and that a
Request-mode report goes only to the host serving the object; the MoQ property's
telemetry line is a MUST NOT. Corpus cases for each refusal.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-05 09:46:43 -04:00

36 lines
766 B
JSON

{
"v": 1,
"sid": "6f1c2a9e0b7d4c3a8e5f1d2c3b4a5968",
"sn": 0,
"ts_ms": 1790000000000,
"event": "response",
"cid": "aaf90792d6ff5318e5f306fbb000dfcbe73637e244aad1a2eff6dae537cd6b5f",
"st": "v",
"sf": "o",
"object": {
"ot": null,
"url": "https://media.example/t/base.wai?token=abc",
"content_hash": null,
"capability": null,
"rendition": null,
"layer": null,
"layers_total": null,
"layer_cap": null,
"counted": null,
"transferred": null,
"d_ms": null,
"dl_ms": null,
"ttfb_ms": null,
"ttlb_ms": null,
"rc": 200,
"path": null,
"receipt": null
},
"present": null,
"switch": null,
"layer_change": null,
"capable": null,
"cohort": null,
"metrics": null,
"claim": null
}