-
Notifications
You must be signed in to change notification settings - Fork 9.4k
Open
Labels
Area: OrderComponent: CustomerComponent: SalesIssue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedPriority: P2A defect with this priority could have functionality issues which are not to expectations.A defect with this priority could have functionality issues which are not to expectations.Progress: ready for devReproduced on 2.2.xThe issue has been reproduced on latest 2.2 releaseThe issue has been reproduced on latest 2.2 releaseReproduced on 2.3.xThe issue has been reproduced on latest 2.3 releaseThe issue has been reproduced on latest 2.3 releaseReproduced on 2.4.xThe issue has been reproduced on latest 2.4-develop branchThe issue has been reproduced on latest 2.4-develop branchSeverity: S2Major restrictions or short-term circumventions are required until a fix is available.Major restrictions or short-term circumventions are required until a fix is available.
Description
Preconditions (*)
All Magento 2.2.x versions
Steps to reproduce (*)
- Customer only pages such as the login page, cart, etc are set to index by Magento. This is a concern that session data is indexed for both SEO and security reasons. Also creates a larger server load from bots following sessions.
- What happens in sessions are captured by google resulting in thousands of indexed pages that are customer sessions in their index. Example, this url is allowed to be indexed: customer/account/login/referer/aHa0cHM6Ly93d3cuaG9tZXdldGJhci5jb20vc2t1bGwtb2YtZG9vbS1iZWVyLXN0ZWluLXAtMjg4Mi5odG1s/
- The reason it is allowed to be indexed is because Magento universally applies the to all pages, even pages that are customer only pages such as the cart and login pages that should not be indexed.
- Magento incorrectly attempts to remedy this by allowing the cart and login to be blocked in robots.txt. However since the meta tag on the page directly conflicts this, Google is ignoring the robots.txt
- Google states this is expected behavior when the meta tag and robots conflict. Magento must fix the meta tag to resolve the issue. More details from Google here: https://support.google.com/webmasters/answer/7440203#indexed_though_blocked_by_robots_txt
- Solution is for Magento to allow a separate noindex meta tag for customer only pages as follows
Expected result (*)
- Customer login, cart pages (and any other customer only pages) should have a separate meta applied to them, than the meta tag for rest of the site. That meta for customer only pages should be
Actual result (*)
- Customer only pages are coded to display the same tag as the rest of the site:
- This causes customer sessions to be indexed. Leading to thousands of duplicate pages, one for each session. This is a concern that session date is indexed for both SEO and security reasons. Also creates a larger server load from bots following sessions.
serzhikorlangur
Metadata
Metadata
Assignees
Labels
Area: OrderComponent: CustomerComponent: SalesIssue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedPriority: P2A defect with this priority could have functionality issues which are not to expectations.A defect with this priority could have functionality issues which are not to expectations.Progress: ready for devReproduced on 2.2.xThe issue has been reproduced on latest 2.2 releaseThe issue has been reproduced on latest 2.2 releaseReproduced on 2.3.xThe issue has been reproduced on latest 2.3 releaseThe issue has been reproduced on latest 2.3 releaseReproduced on 2.4.xThe issue has been reproduced on latest 2.4-develop branchThe issue has been reproduced on latest 2.4-develop branchSeverity: S2Major restrictions or short-term circumventions are required until a fix is available.Major restrictions or short-term circumventions are required until a fix is available.