feat: protect signing URLs from indexing, caching, and embedding (#2469)

apps/remix/app/routes/_recipient+/_layout.tsx

@@ -1,15 +1,22 @@
 import { useOptionalSession } from '@documenso/lib/client-only/providers/session';
 import { cn } from '@documenso/ui/lib/utils';
 import { Button } from '@documenso/ui/primitives/button';
+import { i18n } from '@lingui/core';
+import { msg } from '@lingui/core/macro';
 import { Trans } from '@lingui/react/macro';
 import { ChevronLeft } from 'lucide-react';
 import { isRouteErrorResponse, Link, Outlet } from 'react-router';
-
 import { Header as AuthenticatedHeader } from '~/components/general/app-header';
 import { GenericErrorLayout } from '~/components/general/generic-error-layout';
-
 import type { Route } from './+types/_layout';
 
+export function meta() {
+  return [
+    { title: i18n._(msg`Sign Document - Documenso`) },
+    { name: 'robots', content: 'noindex, nofollow, noarchive, nosnippet, noimageindex' },
+  ];
+}
+
 /**
  * A layout to handle scenarios where the user is a recipient of a given resource
  * where we do not care whether they are authenticated or not.

apps/remix/public/robots.txt

@@ -0,0 +1,4 @@
+User-agent: *
+Disallow: /sign/
+Disallow: /d/
+Disallow: /embed/