From 4bb24296e18e6f0923b5300437aecaa271399e89 Mon Sep 17 00:00:00 2001
From: Jonathan Young <jonathanhyoung@users.noreply.github.com>
Date: Wed, 20 Nov 2024 16:22:24 -0500
Subject: [PATCH] Merge ARXIVCE-2828 (/IgnoreMe honeypot with tabindex=-1) to
 master (#798)

* ARXIVCE-2828 Fix honeypot /IgnoreMe endpoint.

* ARXIVCE-2828 use tabindex -1 on honeypot.

---------

Co-authored-by: Jonathan Young <JonathanHYoung@github.com>
---
 browse/templates/base.html | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/browse/templates/base.html b/browse/templates/base.html
index d1fc2b69..cb8bb2fd 100644
--- a/browse/templates/base.html
+++ b/browse/templates/base.html
@@ -83,8 +83,9 @@
 
       <div id="header" class="is-hidden-mobile">
         {% block header %}
-        {#- The ignore_me link is not meant to be visible to users; it is meant to catch robots/crawlers not respecting robots.txt. aria-hidden prevents screenreaders from being caught. -#}
-        <a aria-hidden="true" href="/IgnoreMe"></a>
+        {#- The ignore_me link is not meant to be visible to users; it is meant to catch robots/crawlers not respecting robots.txt.
+            aria-hidden prevents screenreaders from being caught, and tabindex prevents it from being selectable via the tab key. -#}
+        <a aria-hidden="true" tabindex="-1" href="/IgnoreMe"></a>
         {% block header_h1 %}<h1><img src="{{ url_for('static', filename='images/arxiv-logo-one-color-white.svg') }}" alt="arxiv logo" style="height:60px;"/></h1>{% endblock header_h1%}
         {% block login_link %}{% endblock %}
         {{ base_macros.compactsearch() }}