From 7034aab4b68857b99305fce8ccbc6e8caaacbcd4 Mon Sep 17 00:00:00 2001 From: StasonJatham Date: Tue, 22 Sep 2026 15:29:28 +0200 Subject: [PATCH] clarify HTTP 200 detail: anonymous access, not listing CloudFront/CDN endpoints return 200 for GET / but are not listable; the generic HTTP check now says 'anonymous access succeeded' instead of 'listing allowed'. --- internal/probe/probe.go | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/internal/probe/probe.go b/internal/probe/probe.go index 0766d37..1f8ad32 100644 --- a/internal/probe/probe.go +++ b/internal/probe/probe.go @@ -443,7 +443,9 @@ func classifyStatus(status int, tag string) (model.ExposureState, string) { } switch { case status >= 200 && status < 300: - return model.ExposurePublicRead, fmt.Sprintf("%sstatus=%d anonymous listing allowed", prefix, status) + // Generic HTTP check: anonymous access succeeded, but this is not a + // storage list API, so it does not imply the resource is listable. + return model.ExposurePublicRead, fmt.Sprintf("%sstatus=%d anonymous access succeeded", prefix, status) case status == http.StatusUnauthorized || status == http.StatusForbidden: return model.ExposureAuthRequired, fmt.Sprintf("%sstatus=%d authentication required", prefix, status) case status == http.StatusNotFound || status == http.StatusGone: