field_website and field_social_links on user profiles are not rendered with rel="nofollow" attribute.
This makes user profiles a juicy target for spammers.

Links in field_bio do get the nofollow treatment.

Comments

JvE created an issue. See original summary.

drumm’s picture

drumm
he/him
Location NY, US
commented
Assigned: Unassigned » drumm
drumm’s picture

drumm
he/him
Location NY, US
commented
Status: Active » Fixed
Issue tags: +needs drupal.org deployment

Thanks for catching this.

  • drumm committed b2ce399 on 7.x-3.x 
    Issue #2602354: User profile links should have rel="nofollow"
drumm’s picture

drumm
he/him
Location NY, US
commented
Issue tags: -needs drupal.org deployment

This has been deployed.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.