LGA-3479: Disallow search engine indexing

app/main/__init__.py

@@ -5,6 +5,7 @@
 
 from app.main import routes  # noqa: E402,F401
 from app.main import filters  # noqa: E402,F401
+from app.main import middleware  # noqa: E402,F401
 
 
 def get_locale():

app/main/middleware.py

@@ -0,0 +1,8 @@
+from app.main import bp
+
+
+@bp.after_app_request
+def add_noindex_header(response):
+    """Add a noindex header to all responses, to disallow search engines from indexing the page."""
+    response.headers["X-Robots-Tag"] = "noindex"
+    return response

tests/unit_tests/test_middleware.py

@@ -0,0 +1,19 @@
+import pytest
+
+
+@pytest.mark.parametrize(
+    "endpoint",
+    [
+        "/",
+        "/children-families-relationships",
+        "/cookies",
+        "/assets/images/favicon.svg",
+        "/assets/scripts.js",
+        "/assets/styles.css",
+        "/404-page",
+        "/service-unavailable",
+    ],
+)
+def test_noindex_header_on_routes(client, endpoint):
+    response = client.get(endpoint)
+    assert response.headers.get("X-Robots-Tag") == "noindex"