From 4bdffb8f98f3334e620ca8a0d0b464c911b1791d Mon Sep 17 00:00:00 2001 From: r3dg33k <2913793+r3dg33k@users.noreply.github.com> Date: Wed, 13 Aug 2025 13:26:32 +0300 Subject: [PATCH 1/2] Update 02-system-hardening.md --- .../02-verification-dos-donts/02-system-hardening.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/docs/en/12-appendices/02-verification-dos-donts/02-system-hardening.md b/docs/en/12-appendices/02-verification-dos-donts/02-system-hardening.md index 1431ecde..dac8f84f 100644 --- a/docs/en/12-appendices/02-verification-dos-donts/02-system-hardening.md +++ b/docs/en/12-appendices/02-verification-dos-donts/02-system-hardening.md @@ -30,10 +30,8 @@ Some of these are language specific and others have more general applicability. This setting is particularly important using “Anonymous User” role. For example, in Java, remove all `` elements from `web.xml` files. -* Prevent disclosure of your directory structure in the robots.txt file - by placing directories not intended for public indexing into an isolated parent directory. - Then ""Disallow"" that entire parent directory in the robots.txt file - rather than disallowing each individual directory +* Prevent disclosure of your directory structure in the robots.txt file by placing directories not intended for public indexing, AI bots, and search engine crawlers into an isolated parent directory. Then Disallow that entire parent directory in the robots.txt file rather than disallowing each individual directory. + * Configure web and application server to disallow HEAD requests entirely. From ee6047fd5535482628a9805718760cc3298e4ab8 Mon Sep 17 00:00:00 2001 From: r3dg33k <2913793+r3dg33k@users.noreply.github.com> Date: Sat, 23 Aug 2025 07:48:44 +0300 Subject: [PATCH 2/2] Update 02-system-hardening.md --- .../02-verification-dos-donts/02-system-hardening.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/en/12-appendices/02-verification-dos-donts/02-system-hardening.md b/docs/en/12-appendices/02-verification-dos-donts/02-system-hardening.md index dac8f84f..6c8f165a 100644 --- a/docs/en/12-appendices/02-verification-dos-donts/02-system-hardening.md +++ b/docs/en/12-appendices/02-verification-dos-donts/02-system-hardening.md @@ -30,7 +30,8 @@ Some of these are language specific and others have more general applicability. This setting is particularly important using “Anonymous User” role. For example, in Java, remove all `` elements from `web.xml` files. -* Prevent disclosure of your directory structure in the robots.txt file by placing directories not intended for public indexing, AI bots, and search engine crawlers into an isolated parent directory. Then Disallow that entire parent directory in the robots.txt file rather than disallowing each individual directory. +* Prevent disclosure of your directory structure in the robots.txt file by placing directories not intended for public indexing, AI bots, and search engine crawlers into an isolated parent directory. + Then Disallow that entire parent directory in the robots.txt file rather than disallowing each individual directory. * Configure web and application server to disallow HEAD requests entirely.