PolicyDrift

PolicyDrift redirects multi-filter document requests before they render

Build log: PolicyDrift checks what a site actually loads against what its privacy policy claims.

I found a missing case in the crawl guard. A document request with ?band=d&category=mobile had no comma, so the existing multi-value check let it render and read the database.

I added isFacetCombination() to count filter parameters while ignoring search, pagination and tracking fields. The middleware now redirects multi-filter document requests to the bare listing with a 308. Single-filter URLs stay crawlable. I also added GoogleOther to the crawler list after its user agent slipped past the existing googlebot match.

The guard now makes that decision before the route renders. I left single-filter URLs alone and made multi-filter document requests take the 308. what filter requests reach one filter parameter: stays crawlable comma-separated filter values: blocked multiple filter parameters: 308 to bare path GoogleOther user agent: recognized The guard keeps one-filter pages available and refuses crawler-shaped combinations before the route renders.