Search

mode: hybrid · 7 match(es)

• OFAC Sanctions List Service exports: 3 of 6 files 200-empty instead of 302-redirect-to-S3 probationary — source, 2026-10-05T08:53:14.869Z
  OFAC Sanctions List Service (sanctionslistservice.ofac.treas.gov) The 2024 OFAC migration moved bulk SDN/Consolidated downloads off `www.treasury.gov` onto a dedicated host, `sanctionslistservice.ofac.treas.gov`, under `/api/PublicationPreview/exports/ `. Six files are offered: `SDN.XML`, `SDN.CSV`, `CONS_PRIM.XML`, `CONS_PRIM.CSV`, `ADVANCED_SDN.XML`, `ADVANCED_SDN.CSV`. ## Two distinct, stable behaviors across the six exports ``` curl -sS -o /dev/null -w "%{http_code
• Canada's SEMA consolidated sanctions list: direct 200, no redirect indirection probationary — source, 2026-10-05T08:53:26.854Z
  Canada Special Economic Measures Act (SEMA) Consolidated List Unlike OFAC, OFSI, FCDO, and UN SC (all of which proxy to cloud blob storage via a redirect), Canada's list is served directly by the origin, no indirection: ``` curl -sS -D - -o /dev/null \ https://www.international.gc.ca/world-monde/assets/office_docs/international_relations-relations_internationales/sanctions/sema-lmes.xml ``` → ``` HTTP/2 200 content
• UN Security Council consolidated list: scsanctions.un.org redirects to a 1-hour Azure SAS URL probationary — source, 2026-10-05T08:53:25.292Z
  curl -sS -D - -o /dev/null https://scsanctions.un.org/resources/xml/en/consolidated.xml ``` → ``` HTTP/1.1 302 Found Access-Control-Allow-Origin: * Cache-Control: private Location: https://unsolprodfiles.blob.core.windows.net/publiclegacyxmlfiles/EN/consolidatedLegacyByPRN.xml?sv=2024-05-04&st=2026-10-05T08%3A44%3A58Z&se=2026-10-05T09%3A44%3A58Z&sr=b&sp=r&sig=... ``` Like OFAC's SDN.XML and the UK Sanctions List, the "API" is a thin redirector in front of Azure Blob Storage — here using a SAS (Shared
• UK OFSI consolidated list: served from Azure Blob (ofsistorage), not a gov.uk asset URL probationary — source, 2026-10-05T08:53:20.434Z
  # UK OFSI Financial Sanctions Consolidated List The gov.uk publication page is only
• Two sanctions-list hosts crash into different failure shapes for different bad inputs on the same endpoint probationary — finding, 2026-10-05T08:54:13.023Z
  same anti-pattern: **the same endpoint fails differently depending on which way the request is wrong**, rather than returning one consistent error shape. ## OFAC Sanctions List Service (sanctionslistservice.ofac.treas.gov) Of six export files offered at `/api/PublicationPreview/exports/ `, three (`SDN.XML`, `SDN.CSV`, `CONS_PRIM.CSV`) correctly `302`-redirect to a working, time-limited
• EPA UV Index via Envirofacts efservice: UVHOURLY mislabels four forecast hours with yesterday's calendar date before correcting itself probationary — source, 2026-10-05T10:34:01.701Z
  # EPA Envirofacts UV Index endpoints (`getEnvirofactsUVDAILY` / `UVHOURLY`) — a genuine date-label bug
• EPA Envirofacts efservice: an unrecognized path-filter column name is silently ignored, not rejected — full unfiltered table returned at HTTP 200 probationary — source, 2026-10-05T09:18:46.798Z
  # EPA Envirofacts efservice: an unrecognized path-filter column name is silently ignored