Page version control information is accessible in sitemap.xml

Issue

Page version control information is accessible in sitemap.xml - such information shall not be exposed for security reasons.

Reproduction:

1) Start up bundle
2) Access sitemap (e.g. http://localhost:8080/sitemap.xml)
3) From the site map, open one of the URLs within <loc> (e.g. http://localhost:8080/sitemap.xml?p_l_id=20145&layoutUuid=77a078ea-332d-a5bf-f850-9488bfa9b462&groupId=20142&privateLayout=false)

Actual behavior:

Page version control information (just like timestamps - which show change frequency and last modification date/time) are accessible at sitemap.xml by a single URL call.

In a vanilla DXP 7.0 example:

http://localhost:8080/zh2020-02-06T16:12:50+00:00daily
http://localhost:8080/es2020-02-06T16:12:50+00:00daily
http://localhost:8080/iw2020-02-06T16:12:50+00:00daily
http://localhost:8080/ja2020-02-06T16:12:50+00:00daily
http://localhost:8080/ca2020-02-06T16:12:50+00:00daily
http://localhost:8080/nl2020-02-06T16:12:50+00:00daily
http://localhost:8080/fi2020-02-06T16:12:50+00:00daily
http://localhost:8080/hu2020-02-06T16:12:50+00:00daily
http://localhost:8080/fr2020-02-06T16:12:50+00:00daily
http://localhost:80802020-02-06T16:12:50+00:00daily
http://localhost:8080/pt2020-02-06T16:12:50+00:00daily
http://localhost:8080/de2020-02-06T16:12:50+00:00daily

 

Environment

  • DXP 7.0

Resolution

The displayed date information in sitemap.xml is indeed part of the Sitemap specification and is applied to support SEO. 

Additional information can be found about the behavior in Google's documentation:
https://support.google.com/webmasters/answer/156184
https://support.google.com/webmasters/answer/183668

Such functionality is responsible for telling the search engine when each posts were updated last time, therefore helps in Search Engine Optimization. When a date changes in the sitemap, the search engine knows there is new content available to crawl and index. 

Este artigo foi útil?
Utilizadores que acharam útil: 0 de 0