We switched over to use Google App Engine a couple of weeks ago and for some reason we see a lot of spam requests coming to the page that was not present before.
Most of them is coming from "google inc" according to analytics -> Audience -> Technology -> Network with browser version 47.0.2403.89 going to similar paths as below:
/some-path/'-function()%7Bxssdetected(10355911)%7D()-%22%3E%5C%22%3E%3CscrIpt%3Exssdetected(10355911)%3C%2FscrIpt%3E%3CaUdio+src%3Dx+oNerror%3Dxssdetected(10355911)%3E%3C%22-'-function()%7Bxssdetected(10355911)%7D()/
and they are to the appspot domain not the custom domains
What is this? Why is google spamming our page with these strange requests?
Ok. Figured it out. It was Google App Engine -> Security Scans
Related
I have been building several GoApp sites with GoLang backend and a lightweight html5/css3/javascript (usually AngularJS) front end. Most of these were for practice, but I have recently created my own personal site with this same pattern and decided that I wanted my own custom domain for it.
I followed the steps outlined here: Google App Custom Domains and everything seemed great. People were able to hit my site (with and without the www) and I was seeing traffic come through Google Analytics.
Now for the problem... as I was looking at various search engines and attempting to submit my site to the index, I am getting "Site Not Found" errors from the Search Engines. For Google and Bing I went into webmaster tools and everything looked fine on the diagnostics (Robots.txt and SiteMap.xml). However after a few days, I am still showing the site is not being indexed.
So the question is, does anyone know why I might be having issues? Nothing I have found seems to point to what the cause might be.
Some of the other SO pages I looked at first:
are .appspot google app engine sites restricted in crawl / search engine rankings?
Wordpress Site Will Not Index In Google
Google App Engine + Custom domain
I'm trying to use a subdomain to serve a matching version id with Google App Engine and Google Apps. I've gone through the documentation but it's still unclear to me.
On this page regarding custom domains, it says I'm in a special case for using Google Apps. test.example.com -> to load "test" version of the application.
https://cloud.google.com/appengine/docs/domain -
Note that the instructions on this page are for App Engine apps that use an ordinary HTTP connection and are not served through Google Apps. Here are some related procedures that require different instructions:
This leads me to here https://support.google.com/a/answer/91080
It looks like the only way to add this subdomain in Google Apps is the Sites URL field.
Will the Sites URL correspond to the App Engine version ID?
You only need to use Google Apps to map an appengine app to a domain if you need https. Right now, Google Apps is the only way you can upload an SSL cert - hence this restriction.
If you do map your appengine app to a domain through google apps, you can do what you want by using wildcard subdomain mapping. Read more here..
The whole process is tedious, slow, and painful, and thats only when its not confusing, so put aside a good few hours to make all the changes and wait for DNS to propagate.
I'm trying to setup Google App Engine with custom domain and SSL.
I've added the certificates to Google Apps and added the custom domains to Google App Engine.
I can successfully access http://domain.com and https://domain-com.appspot.com but when I try to access https://www.domain.com I got the following error: This webpage is not available
The domain is lonardiDOTorg
Any suggestions?
After some research, my findings show that this isn't supported for the moment being.
Issue 10802 on the Google App Engine issue tracker seems to confirm that it isn't yep available at the moment.
This stackoverflow post seems to contain the different workarounds that other users have used.
I hope this helps.
It is very challenging to help with this kind of issue without being able to inspect the domain and app itself.
Are there any privacy concerns in sharing the domain name so that we can see if the page is being returned by Google or by your DNS provider? It may be possible that the DNS records aren't set correctly.
Keep in mind that as this configuration is done on the Google Apps side, the Apps team may be able to assist if you have a Apps for Business account. This could help get assistance without sharing any information.
Apps Help Center: https://support.google.com/a/answer/2644334
Apps Contact Page: https://support.google.com/a/answer/2644334#contact=1
I know this might be a duplicate question, but there was no precise answer to the question :
Can i map my appspot application URL to a non google apps domain ?
The precise answer is no! If you want to use a custom domain, it has to be a Google Apps domain. See here for info -> https://developers.google.com/appengine/docs/domain
Since today is now possible to assign any custom domain (no Google Apps required) to an App Engine app. In the Google Cloud Developer Console, go to App Engine -> Settings -> Custom domains
Google Apps is still required if you want to set up SSL via SNI.
See: https://plus.google.com/+RalfRottmann/posts/JNVz2TADgMb
I have a domain I bought (via godaddy.com) - let's call it xyz.com
I have an gae app - let's call it xyzweb.appspot.com
I added a masked redirect at godaddy dns management console and now xyz.com gets redirected to xyzweb.appspot.com (even though the address bar shows xyz.com)
This stops working well in some cases like when I give a direct url redirect like href='/static/url/tohelppage.html' or when I attempt to redirect for OAuth authorization. So I read other posts on what I need to do and the most referred one was https://developers.google.com/appengine/docs/domain.
Based on that page it appears that it is necessary to sign up for a new Google Apps account with the new domain name?
So I Have to pay for Google Apps separately beyond what I am paying for Google AppEngine?
And also manage a separate apps domain and its services? I already have google apps domains and this seems more overhead to run a small app on gae.
Could you please help me understand if I've understood this right? And if there is a way to avoid the additional overhead of an extra google apps account?
The way that I do this, is I set up a basic google apps account (which is free), and I link the GAE app to my google apps account. Then you can set google apps to alias "www" to the appengine app, and now your appengine app works on www.yourdomain.tld
It's explained more here, which I know you already looked at, but it explains it well. Try reading it again.