Add a versionless <meta name="generator"> contributor - #2
Merged
Merged
Conversation
Every public page now advertises the CMS with a standard `<meta name="generator" content="NimbusCMS">`. Constant and deliberately version-less: it carries no version string (fingerprinting surface for no benefit) and no PageContext value (which would be an escaping and, for agent-facing metadata, a prompt-injection sink) — there is nothing dynamic to escape. Reviewed by both Fable skills before build. The review split the original "agent discoverability" idea: this real, shippable sliver ships here; advertising the MCP/agent surface moves to a core-served /llms.txt (a plugin can't serve a root route, and the endpoint is a core fact) — and all three speculative head-advertisement forms (custom link rels, a JSON discovery block, a schema.org potentialAction) were rejected because no agent consumes them today. Tests: emitted on every page kind; constant + no digit (version) ever; a hostile title/site name can't affect the static tag. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Every public page now advertises the CMS with a standard
<meta name="generator" content="NimbusCMS">. Constant and deliberately version-less: no version string (fingerprinting surface for no benefit) and noPageContextvalue (which would be an escaping and, for agent-facing metadata, a prompt-injection sink) — nothing dynamic to escape.Context (both Fable reviews)
This is the shippable sliver of Dan's "agent discoverability" idea. The platform review split the feature and rejected the speculative part:
<head>— via custom link rels, a JSON discovery block, or a schema.orgpotentialAction— was rejected: no agent consumes any of those today.llms.txt, a root file — which a plugin can't serve, and which is a core fact (likerobots.txtadvertisingsitemap.xml). That moves to a companion core/llms.txtslice.initialize).Tests
Emitted on every page kind; constant with no digit (version) ever; a hostile title/site name can't affect the static tag.
Gates
Verified against core
dev-main: php-cs-fixer clean · PHPStan clean · phpunit 13/13.🤖 Generated with Claude Code