[jira] [Assigned] (AIRFLOW-6914) Add a default robots.txt to deny all search engines

["Kaxil Naik (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/AIRFLOW-6914?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Kaxil Naik reassigned AIRFLOW-6914:
-----------------------------------

    Assignee:     (was: Kaxil Naik)

> Add a default robots.txt to deny all search engines
> ---------------------------------------------------
>
>                 Key: AIRFLOW-6914
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-6914
>             Project: Apache Airflow
>          Issue Type: Improvement
>          Components: security, ui
>    Affects Versions: 1.10.6, 1.10.7, 1.10.8, 1.10.9
>            Reporter: Kaxil Naik
>            Priority: Major
>              Labels: gsoc
>
> If the Airflow UI is public, Google can index it and if the Authentication has not been enabled it is a serious security threat if it is a prod cluster.
> Something like this probably should work
> {code:python}
> @app.route('/robots.txt', methods=['GET'])
> def robotstxt():
>     return send_from_directory(os.path.join(app.root_path, 'static', 'txt'),
>                                'robots.txt')
> {code}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)