Skip to content
Infrastructure

VAST advertising

Configure SSRF-safe VAST tags, targeting, media delivery, and reporting.

VAST resolution

BaPlay parses VAST 2, 3, and 4 inline ads and wrapper chains with network entity loading disabled. Documents are limited to 2 MiB, wrappers are bounded, cycles are detected, redirects are manual, and every URL is SSRF validated.

  • • Pre-roll, mid-roll, post-roll, overlay, and popup placements.
  • • Country, device, browser, provider, video, duration, stream, and referrer targeting.
  • • Priority, traffic percentage, CPM, and fallback chains.

Opaque delivery

The browser receives only a reduced creative payload. Third-party media and tracking destinations stay server-side behind encrypted delivery IDs. Media supports Range and CORS; tracking redirects are disabled and response bodies are discarded.

GET  /api/v1/ads/vast/{videoId}
POST /api/v1/ads/impression
GET  /ads/media/{deliveryId}/{kind}

Reporting

Impression, start, quartile, completion, skip, error, and click reports are delivery-bound and deduplicated. Revenue is calculated from trusted server configuration—not a client-submitted amount.