Google URL Inspection Tool Security Issue
Oliver H.G. Mason posted a simple method to use the Google Search Console URL inspection tool on any URL even when you do not have verified access to that URL in Google Search Console. The process is very simple, just set up a page on a URL you do have access to and redirect it to a page you do not have access to.
These are the steps:
(1) Have a Search Console account for a website you control.
(2) Set up a redirect to the desired URL on a property you don’t control.
(3) Inspect the redirected URL in Search Console.
Pretty insane – don’t you think? He showed how it works.
ScreamingFrog called this outrageous:
Inspect URLs for Search Console Accounts You Don’t Have Access To – https://t.co/4tu7oEFu9F from @ohgm . Personally outraged by this.
— Screaming Frog (@screamingfrog) January 23, 2019
I assume Google will close this up soon now that this is public information?
Forum discussion at Twitter.