Just wondering if there is an option I’m not seeing for this.. its made public that any user can visit your discourse instance and goto site/basic-info.json, site/statistics.json and gather information.. I know its not terribly sensitive information, but still would like the option to avoid any data being freely observed. I see in the rails site_controller.rb skip_before_action :redirect_to_login_if_required, only: [‘basic_info’, ‘statistics’] I know I can just comment that out to resolve the issue, but it would be better if there was an option in the admin portal that would do this. Is there a setting I’m not seeing in the admin portal?

The json output is needed for the script to work, HOWEVER if you are worried about scrapers you could put your site behind Cloudflare and enable their “checking your browser” screen which would prevent bots from scraping/abusing the information. If you have privacy concerns with Cloudflare send me a private message and I can refer you to other providers (with extremely strict privacy policies) with a browser check (I don’t want to spam a list here).

Thanks for the response, what script is needing these actions to work?

Discourse (the web application) needs this information, e.g. to render the header and the /about page.

Discourse needs the info to work, there’s no way to block it entirely, you could use a browser check to block bots but many bots can run javascript so that solution might not last long either.

@David_Foster To prevent statistics.json from being publicly visible, turn off share anonymized statistics (Admin->Settings->Other) Note that the information is also on the About page so you may want to override the about.hbs template.

Would that also block basic-info.json?

Can you block json feedback from being public? (e.g /site/statistics.json /site/basic-info.json)

Product Support

David_Foster (David Foster) November 27, 2017, 9:22pm 8

thanks for that! all good now!
no more json data available to the public.
yay!

Topic		Replies	Views
Disabling view counts in statisticsjson Product Support	5	188	January 5, 2025
Hide public statistics from /about and about.json Product Support	4	224	November 13, 2024
Add setting to remove /about stats & public data Feature about-page	22	1705	December 24, 2024
Disable per user access/usage statistics Product Support	6	1425	November 21, 2020
Using JavaScript fetch to get publicly available page from Discourse into an external site (Discourse API) Product Support	2	743	April 10, 2023

Can you block json feedback from being public? (e.g /site/statistics.json /site/basic-info.json)

Related topics