diff --git a/docs/en/12-appendices/02-verification-dos-donts/02-system-hardening.md b/docs/en/12-appendices/02-verification-dos-donts/02-system-hardening.md index 1431ecde..6c8f165a 100644 --- a/docs/en/12-appendices/02-verification-dos-donts/02-system-hardening.md +++ b/docs/en/12-appendices/02-verification-dos-donts/02-system-hardening.md @@ -30,10 +30,9 @@ Some of these are language specific and others have more general applicability. This setting is particularly important using “Anonymous User” role. For example, in Java, remove all `` elements from `web.xml` files. -* Prevent disclosure of your directory structure in the robots.txt file - by placing directories not intended for public indexing into an isolated parent directory. - Then ""Disallow"" that entire parent directory in the robots.txt file - rather than disallowing each individual directory +* Prevent disclosure of your directory structure in the robots.txt file by placing directories not intended for public indexing, AI bots, and search engine crawlers into an isolated parent directory. + Then Disallow that entire parent directory in the robots.txt file rather than disallowing each individual directory. + * Configure web and application server to disallow HEAD requests entirely.