-
Notifications
You must be signed in to change notification settings - Fork 9.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add meta NOINDEX,NOFOLLOW to admin scope to avoid accidental crawling #17163
Add meta NOINDEX,NOFOLLOW to admin scope to avoid accidental crawling #17163
Conversation
Hi @cmtickle. Thank you for your contribution
For more details, please, review the Magento Contributor Assistant documentation |
Hi @cmtickle, please, sign CLA, otherwise, we can't process your pull request |
Hi @VladimirZaets |
@cmtickle you should add the email address that you use for Github account to your git config. |
… into noindex-nofollow-admin
Hi @VladimirZaets I've done that, CLA now showing as signed. Thanks. |
@cmtickle Great, thanks |
Hi @cmtickle. Thank you for your contribution. Please, consider to port this solution to 2.3 release line. |
Description
On occasion the admin url may be leaked to the frontend. This can (and has) result in the admin URL being available in search engines. This provides easy targets for brute force/password guessing hacks.
This fix will add a meta tag which instructs Google and other friendly bots not to add the admin URL to search results.
Manual testing scenarios
Visit the admin panel and view the source code. The head section should contain
Contribution checklist