docs: document locale-blank as hreflang opt-out per host #3
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "docs/hreflang-locale-opt-out"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Summary
Motivation
Hardening note #2 from the 2026-06-27 security audit.
HreflangEmitteralready skips hosts with no locale set — this just makes that behaviour visible to operators so they know leaving locale blank on a Tor onion mirror (or any host they don't want advertised) keeps it out of the emitted<link rel="alternate">tags. No logic changes.Test plan
composer lint— cleanHreflangEmitterunit test unchanged🤖 Generated with Claude Code