/products.json File

Online Store and Theme Development
1

Short description of issue

All products are available, despite password/log-in protection

Link to Shopify Store

https://avenue-clothing-theme.myshopify.com/products.json

Reproduction steps

N/A

Additional info

Does anyone have any experience blocking the /products.json file from either direct access or providing all product information on a non-Plus site? This is not meant to simply block bots, rather anyone from accessing directly.

This file is available, even if a store is password protected. Seems even the ‘lock’ apps are not able to protect this data.

There should be a simple, default way to protect this data.

What type of topic is this

Bug report
Feature request

2

use cloudflare to block the /products.json endpoint on the main domain. the problem, though, is that you can’t do the same on the myshopify domain.