Just wondering if there is an option I’m not seeing for this.. its made public that any user can visit your discourse instance and goto site/basic-info.json, site/statistics.json and gather information.. I know its not terribly sensitive information, but still would like the option to avoid any data being freely observed. I see in the rails site_controller.rb skip_before_action :redirect_to_login_if_required, only: [‘basic_info’, ‘statistics’] I know I can just comment that out to resolve the issue, but it would be better if there was an option in the admin portal that would do this. Is there a setting I’m not seeing in the admin portal?

The json output is needed for the script to work, HOWEVER if you are worried about scrapers you could put your site behind Cloudflare and enable their “checking your browser” screen which would prevent bots from scraping/abusing the information. If you have privacy concerns with Cloudflare send me a private message and I can refer you to other providers (with extremely strict privacy policies) with a browser check (I don’t want to spam a list here).

Thanks for the response, what script is needing these actions to work?

Discourse (the web application) needs this information, e.g. to render the header and the /about page.

Discourse needs the info to work, there’s no way to block it entirely, you could use a browser check to block bots but many bots can run javascript so that solution might not last long either.

@David_Foster To prevent statistics.json from being publicly visible, turn off share anonymized statistics (Admin->Settings->Other) Note that the information is also on the About page so you may want to override the about.hbs template.

Would that also block basic-info.json?

Can you block json feedback from being public? (e.g /site/statistics.json /site/basic-info.json)

Product Support

David_Foster (David Foster) 2017 年11 月 27 日 21:22 8

thanks for that! all good now!
no more json data available to the public.
yay!

话题		回复	浏览量
Disabling view counts in statisticsjson Product Support	5	188	2025 年1 月 5 日
Hide public statistics from /about and about.json Product Support	4	224	2024 年11 月 13 日
Add setting to remove /about stats & public data Feature about-page	22	1705	2024 年12 月 24 日
Disable per user access/usage statistics Product Support	6	1425	2020 年11 月 21 日
Using JavaScript fetch to get publicly available page from Discourse into an external site (Discourse API) Product Support	2	743	2023 年4 月 10 日

Can you block json feedback from being public? (e.g /site/statistics.json /site/basic-info.json)

相关话题