Problem/Motivation

We use 'toboggan/denied' to handle our 403 pages (variable site_403 is set to 'toboggan/denied').

However, 'toboggan/denied' returns a 200 HTTP code and as a result gets indexed by Google, which we don't really want. Shouldn't this page return a 403 instead of a 200 ?

Proposed resolution

Make 'toboggan/denied' return a 403 instead of a 200.

Comments

fengtan created an issue.

GuyPaddock’s picture

GuyPaddock CreditAttribution: GuyPaddock at Inveniem commented

I am not able to reproduce this bug. We are using Login Toboggan version 1.5 and it definitely returns a 403 on access denied pages that are using Login Toboggan.