Redirect Module Configuration

The Redirect module is required along with the the Pathauto module to reduce the problem of node id enumeration. This is used along with the Pathauto module ensures that if someone types the node id to navigate to the node then the website will show the redirected URL. To use this go to the Configuration > URL Redirect page and navigate to the Settings tab. The following is the configuration that we have done on the TMC PROM site to ensure that node ids are redirected to the correct URL alias. Basically we tell that when URL aliases are created (manually or by Pathauto), then a redirect is also created. The query string is retained to ensure that form pre-population works.

We also ensure that globally clean and cannonical URL sare enforced and also that there is a check for access to the redirected page toe ensure redirection does not occur on protected pages (so that secret URLs are not revealed).