Rabbit Hole

Rabbit Hole is a plugin that adds the ability to control what should happen when an entity is being viewed at its own page. Perhaps you have a content type that never should be displayed on its own page, like an image content type that's displayed in a carousel. Rabbit Hole can prevent this object from being accessible on its own page, through p=xxx (or permalink). Options This works by providing multiple options to control what should happen when the entity is being viewed at its own page. You have the ability to

• Deliver an access denied page (401, 403).
• Deliver a page not found page (404).
• Issue a page redirect to any path or external url (301, 30x).
• Or simply display the entity (regular behavior, 200). This is configurable per:
• post types and single post
• taxonomy and single term
• roles and single user It's possible to generate dynamic values with Twig or Shortcode for the redirect path. This makes it possible to execute different redirects based on whatever logics you need. Perhaps you want a user to be able to view nodes that he has created, but no one else's.

New options:

• Archives Support for Terms and Authors archive pages
• Conditions There will be the possibility to configure a User Role that override Rabbit Hole completely, useful for Memberships.
• Display Message Show a custom Message for unauthorized page (401, 403) Drupal porting This is porting from a beloved Drupal module which I used in all my projects. Thanks to the authors for the idea.

1.2 - 2026-01-12

• Fix: Security vulnerability, Cross-Site Request Forgery (CSRF) - CVE-2025-13366
• Secure: add more escape/santize

1.1 - 2023-11-04

• Add: Support for Authors and Terms archives
• Add: Bypass rules by current User Roles
• Add: Alternate Message for Denied code (401, 403)

1.0.1 - 2022-07-25

• Initial release.