It looks like these guy found a way to cirumvent the nofollow by adding <sub> tags, see code of http://drupal.org/drupalgive#comment-5917670, please. Not tested myself to abuse the signature this way, but his backlink is missing rel="nofollow" for sure.

Comments

hass’s picture

Issue summary: View changes

a

hass’s picture

Issue summary: View changes

a

greggles’s picture

Status: Active » Postponed (maintainer needs more info)

The all have rel=nofollow as far as I can tell. Which link is getting past the system in your opinion?

silverwing’s picture

Michelle's signature link in sub doesn't have nofollow, but user asb's standard links do.

I also use sub in my signature, but I seem to get nofollowed (i.e. http://drupal.org/node/975052#comment-3723536)

hass’s picture

Status: Postponed (maintainer needs more info) » Active

Yes, I mean Michelles signature...

WorldFallz’s picture

definitely weirdly inconsistent-- my sig also uses sub, and is also correctly no-followed. Can't seem to find any other case though... still looking...

WorldFallz’s picture

Issue summary: View changes

a

lizzjoy’s picture

Issue summary: View changes
Status: Active » Closed (won't fix)

I'm closing this issue due to inactivity. If it is still a problem, please open this issue again and leave a comment. Thanks.

hass’s picture

Status: Closed (won't fix) » Active

Inactivity does not mean the bug has been fixed.

dddave’s picture

Project: Drupal.org site moderators » Drupal.org customizations
Version: » 7.x-3.x-dev
Component: Spam » Code

I think this issue gets more attention in this queue.

drumm’s picture

Status: Active » Postponed (maintainer needs more info)

Comments like https://www.drupal.org/drupalgive#comment-5812556 aren't actually using the signature for

Goutam Dey
[URL] - Social way of learning drupal

It is part of the comment body.

We can either consider nofollow-ing all comment content, or think about policies for enforcing using the comment body & signature "properly".

WorldFallz’s picture

It's actually related to whether or not someone enters a link with the <a> tag or by typing the url and letting the url to link filter do it.

tag link: Drupal.org (correctly given 'nofollow')

auto link: http://drupal.org (missing 'nofollow').

I believe it's caused by the order of the filters. The 'Convert URLs into links' filter has to come before the 'Limit allowed HTML tags' filter and the 'Add rel="nofollow" to all links' option must be checked.

tvn’s picture

WorldFallz, here is a fresh dev site: http://searchdocs-drupal.redesign.devdrupal.org/. Can you take a look there and confirm that it's indeed filter order?

WorldFallz’s picture

Sure! But I just tried to get there and after drupal/drupal I'm getting a white screen....

tvn’s picture

Cafuego was working on something there and probably broke it :)
You can test on mine for now http://tvn-drupal.redesign.devdrupal.org/

Thanks!

WorldFallz’s picture

that one works! can you email me an admin username/pass ? I need at least enough access to get to admin/config/content/formats... thanks.

WorldFallz’s picture

Yep... that was it. I fixed by moving the 'Convert URLs into links' filter to be the first filter in the 'filtered html' text format.

You can see it here: https://tvn-drupal.redesign.devdrupal.org/node/2372259

drumm’s picture

Status: Postponed (maintainer needs more info) » Reviewed & tested by the community
Issue tags: +needs drupal.org deployment
drumm’s picture

Status: Reviewed & tested by the community » Active

Actually.. that's not a good solution quite yet.

I commented on https://tvn-drupal.redesign.devdrupal.org/node/2372259 with

http://example.com

And [/codefilter_code] gets added.

WorldFallz’s picture

Status: Active » Needs review

OKey doke... moved code filter to before url converter.

WorldFallz’s picture

Any chance we could push this forward. With all the changes to user participation, it would be great to get this one fixed once and for all. I still see quite a few links missing the 'nofollow'.

drumm’s picture

Issue tags: -needs drupal.org deployment

I think this needs a bit more testing, which I'll require for #2396165: Code filter configuration removes blank lines. Re-ordering filters is just too likely to have side-effects without good QA.

And the specific order change needed added to the issue summary here.

WorldFallz’s picture

Ah I hadn't seen that one. So we need to wait for that to be fixed first, and then do some more testing for this one?

Added the other issue as related. And I'll look for that one to be fixed, so I can pick and do some more testing when it's done.

drumm’s picture

Ideally both should be fixed at once, since they are both re-ordering filters. However, if either has good testing and is ready significantly earlier, that one doesn't need to be held back.

drumm’s picture

Assigned: Unassigned » drumm

#2396165: Code filter configuration removes blank lines is now deployed, which includes adding nofollow to URLs converted to links. This should cover signatures too, but I do want to double check new comments, since the old filtering is cached.

drumm’s picture

Status: Needs review » Fixed

The cc all from another deployment fixed up the existing signatures. They must have been hitting the check_markup() cache.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.

WorldFallz’s picture

Yep-- from what I can see, all links (content and sig) are properly no-followed again. Awesome!