[webui] don't let google spider request diffs