From e07a9c00755f405e6044291ddb84de70a6d5b0d2 Mon Sep 17 00:00:00 2001
From: Felix Ableitner <me@nutomic.com>
Date: Mon, 13 Jan 2025 10:05:07 +0100
Subject: [PATCH] Verify url after redirect

---
 src/fetch/mod.rs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/fetch/mod.rs b/src/fetch/mod.rs
index b8e9c84..c226fc1 100644
--- a/src/fetch/mod.rs
+++ b/src/fetch/mod.rs
@@ -74,6 +74,7 @@ pub async fn fetch_object_http<T: Clone, Kind: DeserializeOwned>(
     // Ensure id field matches final url after redirect
     if res.object_id.as_ref() != Some(&res.url) {
         if let Some(res_object_id) = res.object_id {
+        data.config.verify_url_valid(&res_object_id).await?;
             // If id is different but still on the same domain, attempt to request object
             // again from url in id field.
             if res_object_id.domain() == res.url.domain() {