[
https://issues.apache.org/jira/browse/AIRFLOW-6914?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Kaxil Naik updated AIRFLOW-6914:
--------------------------------
Description:
If the Airflow UI is public, Google can index it and if the Authentication has
not been enabled it is a serious security threat if it is a prod cluster.
Something like this probably should work
{code:python}
@app.route('/robots.txt', methods=['GET'])
def robotstxt():
return send_from_directory(os.path.join(app.root_path, 'static', 'txt'),
'robots.txt')
{code}
was:If the Airflow UI is public, Google can index it and if the
Authentication has not been enabled it is a serious security threat if it is a
prod cluster
> Add a default robots.txt to deny all search engines
> ---------------------------------------------------
>
> Key: AIRFLOW-6914
> URL: https://issues.apache.org/jira/browse/AIRFLOW-6914
> Project: Apache Airflow
> Issue Type: Improvement
> Components: security, ui
> Affects Versions: 1.10.6, 1.10.7, 1.10.8, 1.10.9
> Reporter: Kaxil Naik
> Assignee: Kaxil Naik
> Priority: Major
>
> If the Airflow UI is public, Google can index it and if the Authentication
> has not been enabled it is a serious security threat if it is a prod cluster.
> Something like this probably should work
> {code:python}
> @app.route('/robots.txt', methods=['GET'])
> def robotstxt():
> return send_from_directory(os.path.join(app.root_path, 'static', 'txt'),
> 'robots.txt')
> {code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
