Bookmark & Link Health Checker

Test and verify URLs in bulk to detect broken links (404), redirect loops, server errors (500), and latency bottlenecks.

Technical Architecture: Reverse-Engineering High-Concurrency Link Auditing​

Verifying dozens or hundreds of URLs simultaneously presents two critical architectural challenges: browser-level Cross-Origin Resource Sharing (CORS) blocks direct browser-to-server requests, while naive server-side scrapers risk bandwidth exhaustion and Server-Side Request Forgery (SSRF) vulnerabilities.

The Bookmark Health Checker uses a hardened serverless endpoint (/api/checkBookmarkLinks) designed for low-latency batch verification.

1. SSRF Guardrails & Private Network Filtering​

To prevent the scraper from being weaponized to probe internal infrastructure or cloud metadata endpoints (169.254.169.254), incoming hostnames are validated against strict regex blocklists before network requests are initiated:

// api/checkBookmarkLinks.js (SSRF Guard)
const PRIVATE_HOST_PATTERNS = [
  /^localhost$/i,
  /^127\.\d+\.\d+\.\d+$/,
  /^10\.\d+\.\d+\.\d+$/,
  /^172\.(1[6-9]|2\d|3[01])\.\d+\.\d+$/,
  /^192\.168\.\d+\.\d+$/,
  /^\[?::1\]?$/,
  /^0\.0\.0\.0$/,
  /^169\.254\.\d+\.\d+$/, // AWS / GCP metadata service
];

function isPrivateHost(hostname) {
  return PRIVATE_HOST_PATTERNS.some((pattern) => pattern.test(hostname));
}

2. Stream Aborting & Zero-Payload Body Cancellation​

Downloading entire HTML pages, multimedia streams, or large binary files across dozens of URLs would rapidly exhaust serverless execution budgets.

The architecture solves this by issuing requests with early stream cancellation:

async function fetchWithTimeout(url, method, timeoutMs) {
  const controller = new AbortController();
  const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
  const startTime = Date.now();

  try {
    const response = await fetch(url, {
      method,
      signal: controller.signal,
      redirect: 'follow',
      headers: {
        'User-Agent': 'Mozilla/5.0 (compatible; BookmarkChecker/1.0)',
        'Accept': 'text/html,*/*'
      }
    });
    clearTimeout(timeoutId);

    // Cancel body download immediately — only HTTP headers & status are required
    if (response.body) {
      response.body.cancel().catch(() => {});
    }

    return {
      status: response.status,
      statusText: response.statusText,
      finalUrl: response.url,
      responseTimeMs: Date.now() - startTime
    };
  } catch (err) {
    clearTimeout(timeoutId);
    throw Object.assign(err, { responseTimeMs: Date.now() - startTime });
  }
}

3. HTTP Status Codes Diagnosis Table​

4. Client-Side Security & Zero-Persistence Guarantee​

• No Link Storage: URLs submitted for checking are processed in volatile RAM buffers and immediately returned to your browser.
• No Telemetry Tracking: The tool does not store URLs in databases or analytics platforms.
• Isolated Execution: Each batch of URLs executes inside an isolated Vercel serverless sandbox.

Related Tools​

Related Posts​

Markdown Reference Cheatsheet 2025

Markdown is a lightweight markup language that allows you to format plain text. It is widely used for documentation, writing articles, and creating web content.

Understanding Off-by-One Errors in JavaScript

A guide for senior developers on identifying and avoiding off-by-one errors in JavaScript with practical code examples.

Check History of a Specific Line in VS Code

You can check the history of a specific line in VS Code using the built-in features or the specific view. You can also install the free extension.