<i>&quot;However, for information security, this redirect should only happen if the content is published, because it can lead (like we see here) to information disclosure.&quot;</i><p>Or even better: For information security, just don&#x27;t put information that you don&#x27;t want to publicly disclose on a public web site. (Or if you do, at least make it accessible only to logged-in users with the proper credentials.)