Hacker News Reader

I'm not familiar with jamstack/pages at all, but I get the shivers when I see this magic "_redirects" file in the root of your output directory. This is just bad design. It should not be in the output / public directory, in case someone misconfigures something.

View on HN

It's nice because it's a very simple file format. Because it resides in the output directory it makes it easy to generate with static site generators.

Also, they probably copied the design from Netlify [1] to improve compatibility and therefore make it easier for people to migrate from Netlify.

[1] https://docs.netlify.com/routing/redirects/#syntax-for-the-r...

Yeah I understand, but there is an immense amount of scraping going on for "production.env", .htaccess files etc. It's the same logic that results in publicly open mongo databases.

Genuinely curious, how could publishing a list of redirects on a static website be harmful?

It reveals site structure but more importantly, it acts as an architectural foundation (location) for the future.

Reply on news.ycombinator.com