Changeset 37726

Timestamp:

06/16/2016 02:58:28 PM (8 years ago)

Author:

rachelbaker

Message:

REST API: Include X-Robots-Tag: noindex header in REST API responses to prevent endpoints from being indexed by search engines.

Prevent duplicate content issues with search engines and REST API endpoint response data.

Fixes #36390.
Props m_uysl for the initial patch.

Location:

trunk

Files:

• src/wp-includes/rest-api/class-wp-rest-server.php (modified) (1 diff)
• tests/phpunit/tests/rest-api/rest-server.php (modified) (1 diff)

trunk/src/wp-includes/rest-api/class-wp-rest-server.php

@@ -227 +227 @@
         $content_type = isset( $_GET['_jsonp'] ) ? 'application/javascript' : 'application/json';
         $this->send_header( 'Content-Type', $content_type . '; charset=' . get_option( 'blog_charset' ) );
+        $this->send_header( 'X-Robots-Tag', 'noindex' );
 
         /*

trunk/tests/phpunit/tests/rest-api/rest-server.php

@@ -718 +718 @@
     }
 
+    public function test_x_robot_tag_header_on_requests() {
+        $request = new WP_REST_Request( 'GET', '/', array() );
+
+        $result = $this->server->serve_request('/');
+        $headers = $this->server->sent_headers;
+
+        $this->assertEquals( 'noindex', $headers['X-Robots-Tag'] );
+    }
+
     public function test_nocache_headers_on_authenticated_requests() {
         $editor = self::factory()->user->create( array( 'role' => 'editor' ) );