Is robots txt a vulnerability?