rero / sonar / 22859677677

95%

master: 95%

push

github

fix(views): deny global view access on dedicated portals

Dedicated portals (e.g., folia.unifr.ch) could serve documents from
other organisations via the global URL path, causing search engines
to index cross-organisation content.

The route converter now checks if the request comes from a dedicated
portal and rejects the global view with a 404. The check also uses
urlparse().hostname instead of netloc.split(":")[0] to correctly
handle IPv6 addresses and URLs with explicit ports.

- Closes #909.

Co-Authored-by: Pascal Repond <pascal.repond@rero.ch>

6 of 6 new or added lines in 1 file covered. (100.0%)

7710 of 8117 relevant lines covered (94.99%)

0.95 hits per line