eric/multi-domain-redux
Watch
1
0
Fork
You've already forked multi-domain-redux
 0
Code Issues 1 Pull requests Projects Releases 4 Packages Wiki Activity Actions

docs: document locale-blank as hreflang opt-out per host #3

Merged
eric merged 1 commit from docs/hreflang-locale-opt-out into main 2026-06-27 15:10:53 -07:00
Conversation 0 Commits 1 Files changed 3 +8 -1
eric commented 2026-06-27 15:03:54 -07:00
Owner

Summary

  • README: expands the Locale field description to note that hosts with no locale are excluded from hreflang output
  • Settings UI: adds a description note below the host table explaining the opt-out
  • .pot: adds the new translatable string

Motivation

Hardening note #2 from the 2026-06-27 security audit. HreflangEmitter already skips hosts with no locale set — this just makes that behaviour visible to operators so they know leaving locale blank on a Tor onion mirror (or any host they don't want advertised) keeps it out of the emitted <link rel="alternate"> tags. No logic changes.

Test plan

  • composer lint — clean
  • No logic changes; existing HreflangEmitter unit test unchanged

🤖 Generated with Claude Code

## Summary - **README:** expands the Locale field description to note that hosts with no locale are excluded from hreflang output - **Settings UI:** adds a description note below the host table explaining the opt-out - **.pot:** adds the new translatable string ## Motivation Hardening note #2 from the 2026-06-27 security audit. `HreflangEmitter` already skips hosts with no locale set — this just makes that behaviour visible to operators so they know leaving locale blank on a Tor onion mirror (or any host they don't want advertised) keeps it out of the emitted `<link rel="alternate">` tags. No logic changes. ## Test plan - [x] `composer lint` — clean - [x] No logic changes; existing `HreflangEmitter` unit test unchanged 🤖 Generated with [Claude Code](https://claude.com/claude-code)
docs: document locale-blank as hreflang opt-out per host
All checks were successful
CI / Lint + Static Analysis (pull_request) Successful in 53s
Details
CI / Unit Tests (PHP 8.2) (pull_request) Successful in 46s
Details
CI / Unit Tests (PHP 8.3) (pull_request) Successful in 1m12s
Details
CI / Unit Tests (PHP 8.4) (pull_request) Successful in 1m13s
Details
CI / Unit Tests (PHP 8.5) (pull_request) Successful in 1m13s
Details
01fb46a831 
Hosts with no locale set are already excluded from hreflang output by
HreflangEmitter. Document this as the intentional per-host opt-out so
operators know leaving locale blank (e.g. on a Tor onion mirror) keeps
that host out of the emitted alternate tags.

README: expands the Locale field description in the configuration table.
Settings UI: adds a description note below the host table.
.pot: adds the new translatable string.

Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
eric merged commit 4b678b556f into main 2026-06-27 15:10:53 -07:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug
Something is not working

  
duplicate
This issue or pull request already exists

  
enhancement
New feature

  
help wanted
Need some help

  
invalid
Something is wrong

  
question
More information is needed

  
security
Security vulnerability or hardening

  
wontfix
This won't be fixed

No labels
bug
duplicate
enhancement
help wanted
invalid
question
security
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
eric/multi-domain-redux!3
No description provided.