[TYPO3-dev] Meta tag "noindex, nofollow" on development domain

[Christopher Torgalson]

Hi,

On Wed, Aug 18, 2010 at 3:17 PM, Thomas "Thasmo" Deinhamer
<thasmo at gmail.com> wrote:
> Christopher Torgalson wrote:
>>
>> I can't offer an opinion about how severe it is, but this method is
>> risky to some extent (it used to be possible to set config.baseURL to
>> the value of HTTP_HOST automatically, but this capability was removed
>> due to the risk).
>
> Hello Christopher!
>
> I'm aware of this security problem and that the possibility has been
> removed. Nevertheless I'm not setting the config.baseUrl using conditions.
> Actually I try to avoid setting the baseUrl, but try to use the
> "config.absRefPrefix = /" setting wherever possible. (Rest is done using
> domain records etc.)
>
> I just needed the conditions for disabling search engine indexing and google
> tracking in first place. Of course I'm interested in any security issue
> regarding the usage of a condition on the HTTP_HOST!


Whoops. That's what I get for not reading carefully. You're right of course :-)

-- 
Christopher Torgalson
http://www.typo3apprentice.com/