Avoid direct access to reviews list Ajax

Good evening,

Do not know wether it is intentional,

But you can access directly to the reviews list Ajax controller 

You can give it a try :
/review/product/listAjax/id/111111616
=> Display the raw output in the browser.

Why not restrain this page to Ajax only.

Give me your think,

Ilan Parmentier

Author: Ilan Parmentier

app/code/Magento/Review/Controller/Product/ListAjax.php

@@ -22,7 +22,8 @@ class ListAjax extends ProductController implements HttpGetActionInterface
      */
     public function execute()
     {
-        if (!$this->initProduct()) {
+        if (!$this->getRequest()->isAjax() 
+            || !$this->initProduct()) {
             /** @var \Magento\Framework\Controller\Result\Forward $resultForward */
             $resultForward = $this->resultFactory->create(ResultFactory::TYPE_FORWARD);
             return $resultForward->forward('noroute');