saopig1andClaude Fable 5 ea0f7c17b5 feat(web): keep deployed WebUI out of search-engine indexes ...

Searching "TsmusicBot" surfaced many deployed instances' WebUI URLs,
letting strangers walk into other people's control pages (issue #128).
Add defence-in-depth so crawlers stop indexing public deployments:

- send `X-Robots-Tag: noindex, nofollow` on every Express response
- serve `/robots.txt` with `User-agent: * / Disallow: /`
- add `<meta name="robots" content="noindex, nofollow">` to index.html,
  which also covers the /bot/<id> dedicated-link pages (same SPA shell)

These layers only prevent indexing; real protection stays with WebUI
auth and the reverse proxy. Document this in the README security section
and warn users not to post their WebUI link on public pages.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-16 23:31:31 +08:00

..

src

feat: make Jellyfin an optional source instead of the default

2026-07-14 00:54:34 +08:00

index.html

feat(web): keep deployed WebUI out of search-engine indexes

2026-07-16 23:31:31 +08:00

package-lock.json

fix #37

2026-04-20 23:48:46 +08:00

package.json

feat: add QR code login for NetEase/QQ Music accounts in Settings page

2026-03-30 01:34:06 +08:00

tsconfig.json

feat: add Vue.js WebUI — YesPlayMusic-inspired SPA with all pages and components

2026-03-30 00:58:33 +08:00

tsconfig.node.json

feat: add Vue.js WebUI — YesPlayMusic-inspired SPA with all pages and components

2026-03-30 00:58:33 +08:00

vite.config.ts

feat: add Vue.js WebUI — YesPlayMusic-inspired SPA with all pages and components

2026-03-30 00:58:33 +08:00