Sensitive information leaked to google search result
arnav-zek
HOBBYOP

3 months ago

I shared an invite link on https://station.railway.com/questions/deployment-is-stuck-on-image-push-728b9eb7 and now that invite link is apearing on google search result. Please delete the invite link from the forum page. If possible please delete the page altogether.

Solved

11 Replies

arnav-zek
HOBBYOP

3 months ago

Railway should have mechanisms to exclude them from search results, I guess in the robot.txt


3 months ago

Can agree here. Even if the user shared it publicly or already expired/not active, that should not be indexed by Google.


3 months ago

!t


3 months ago

This thread has been escalated to the Railway team.

Status changed to Awaiting Railway Response passos 3 months ago


3 months ago

Maybe that should've gone to #🤗|feedback but it's too late 😅 and maybe it pouses a security risk


arnav-zek
HOBBYOP

3 months ago

Hey! Railway Team, is there any way to resolve this?


echohack
EMPLOYEE

3 months ago

Hey there!

I marked that thread as private, that should clean that up for you.


Status changed to Awaiting User Response Railway 3 months ago


arnav-zek
HOBBYOP

3 months ago

Thanks


Status changed to Awaiting Railway Response Railway 3 months ago


Status changed to Solved noahd 3 months ago


arnav-zek
HOBBYOP

3 months ago

Still it is in the search results, and even AI is picking it up, I have to launch this product in a few days, this is very terrible, this is a huge problem, this will really screw things up. Please! fix this. Railway should have never let those pages get indexed, this is such a mess up.

1451159228298297300


3 months ago

We let Google index our form and you had shared that link publicly.


arnav-zek
HOBBYOP

3 months ago

Invite link should never get indexed, u guys have a terrible robots.txt policy. It is alarming that you guys are not even recognizing that as an issue.


arnav-zek
HOBBYOP

3 months ago

Also, I can't understand the logic behind the following decisions

  • There isn't an easy way to expire the invite link.

  • Once someone tries to join the project using the invite link, there isn't a way for the original author to approve or decline before the user joins the project

Even facebook groups has better security than this.


Loading...