Add meta NOINDEX,NOFOLLOW to admin scope to avoid accidental crawling#17163
Add meta NOINDEX,NOFOLLOW to admin scope to avoid accidental crawling#17163magento-engcom-team merged 3 commits intomagento:2.2-developfrom cmtickle:noindex-nofollow-admin
Conversation
|
Hi @cmtickle. Thank you for your contribution
For more details, please, review the Magento Contributor Assistant documentation |
|
Hi @cmtickle, please, sign CLA, otherwise, we can't process your pull request |
|
Hi @VladimirZaets |
|
@cmtickle you should add the email address that you use for Github account to your git config. |
|
Hi @VladimirZaets I've done that, CLA now showing as signed. Thanks. |
|
@cmtickle Great, thanks |
|
Hi @cmtickle. Thank you for your contribution. Please, consider to port this solution to 2.3 release line. |
Description
On occasion the admin url may be leaked to the frontend. This can (and has) result in the admin URL being available in search engines. This provides easy targets for brute force/password guessing hacks.
This fix will add a meta tag which instructs Google and other friendly bots not to add the admin URL to search results.
Manual testing scenarios
Visit the admin panel and view the source code. The head section should contain
Contribution checklist