Merge ARXIVCE-2828 (/IgnoreMe honeypot with tabindex=-1) to master (#798

) * ARXIVCE-2828 Fix honeypot /IgnoreMe endpoint. * ARXIVCE-2828 use tabindex -1 on honeypot. --------- Co-authored-by: Jonathan Young <[email protected]>
arXiv · Nov 20, 2024 · 4bb2429 · 4bb2429
1 parent 88b4463
commit 4bb2429
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/browse/templates/base.html b/browse/templates/base.html
@@ -83,8 +83,9 @@
 
       <div id="header" class="is-hidden-mobile">
         {% block header %}
-        {#- The ignore_me link is not meant to be visible to users; it is meant to catch robots/crawlers not respecting robots.txt. aria-hidden prevents screenreaders from being caught. -#}
-        <a aria-hidden="true" href="/IgnoreMe"></a>
+        {#- The ignore_me link is not meant to be visible to users; it is meant to catch robots/crawlers not respecting robots.txt.
+            aria-hidden prevents screenreaders from being caught, and tabindex prevents it from being selectable via the tab key. -#}
+        <a aria-hidden="true" tabindex="-1" href="/IgnoreMe"></a>
         {% block header_h1 %}<h1><img src="{{ url_for('static', filename='images/arxiv-logo-one-color-white.svg') }}" alt="arxiv logo" style="height:60px;"/></h1>{% endblock header_h1%}
         {% block login_link %}{% endblock %}
         {{ base_macros.compactsearch() }}