Bug #23106
closedSimulateStatic can be exploited to make sites show up as duplicate content
0%
Description
Every TYPO3 site using simulateStaticDocuments can be "poisoned" as it is possible to submit infinite variations of an URL to search engines (i.e. blabla.10.0.html will output the same content as moreblabla.10.0.html ) as long as the PID is correct ---> duplicate content.
The same applies to wildcard subdomains even worse! -> This way the whole site can become duplicate content. Bummer!
The proper way is to check if an URL exists (incl. title and subdomain prefix). If the title is wrong redirect with 301 to the correctly titled URL. If the page does not exist do a redirect with 301 to somewhere or 404 (which is already covered in the install tool however it is using the wrong redirection type).
If you need more input just ask ( jh@venetowebdesign.com )
This issues was previously part of #15128. I split them of, as the solution to this part has to be integrated in SimulateStatic (and not only in the Core in general).
(issue imported from #M15007)