Answered Why are unpublished pages still available on the front end?

I'm noticing that unpublished pages in my site are still accessible on the front end if trailed with .html

If I navigate to the site followed by the alias only, then the site load the home page be default—which is expected.

But, if I add .html at the end, then the unpublished page loads.

myDomain.com/testpage loads the home page
myDomain.com/testpage.html loads the test page, which is not good

I would expect that if a page is unpublished, and someone links to it from an older link from some other site, then the home page of the site should load — NOT the page that I thought I had taken offline.

Is this a bug, or do I have something set incorrectly?

Is there any chance that those old pages are still in the MODX cache or the browser cache. Are they still available if you view in incognito or private mode after manually deleting all files in the core/cache directory?

I should have thought of that. The admin user as 'view_unpublished' permission.

Useful to keep in mind, when you are logged in to the Manager you can see unpublished pages as well as a site that is set to be 'offline'.