feat: block crawlers from production webapp

2026-05-30 21:25:03 +03:00
parent acc222da41
commit 3541f2f78b
8 changed files with 86 additions and 0 deletions
@@ -661,6 +661,7 @@ class WebAppSecurityTests(unittest.IsolatedAsyncioTestCase):
        self.assertNotIn("'unsafe-eval'", csp)
        self.assertIn("img-src 'self' data: blob: https:;", csp)
        self.assertNotIn("img-src 'self' data: https: http:;", csp)
+        self.assertEqual(response.headers["X-Robots-Tag"], "noindex, nofollow, noarchive")


 class AdminSettingsSecurityTests(unittest.IsolatedAsyncioTestCase):