Use canonical tags, consistent URLs, and parameterized URL handling to keep duplicates under control. True penalties are rare; the bigger risk is wasted crawl budget and diluted signals.