tonyair/silverstripe-framework
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 14:05:37 +02:00
Code Issues Projects Releases Wiki Activity

BUGFIX Disallow web access to sapphire/silverstripe_version to avoid information leakage (from r114773)

Browse Source 
git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/branches/2.3@114776 467b73ca-7a2a-4603-9d3b-597d59a354a9
This commit is contained in:
Ingo Schommer 2010-12-09 22:55:36 +00:00 committed by Sam Minnee
parent 061d2ecc0e
commit 459a524388
2 changed files with 18 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
.htaccess
View File

@ -1,9 +1,9 @@
<Files *.php>
<FilesMatch "\.(php|php3|php4|php5|phtml|inc)$">
Deny from all
</Files>
<Files static-main.php>
</FilesMatch>
<FilesMatch "(main|static-main|rpc)\.php$">
Allow from all
</Files>
<Files main.php>
Allow from all
</Files>
</FilesMatch>
<FilesMatch "silverstripe_version$">
Deny from all
</FilesMatch>

11
web.config Normal file
View File

@ -0,0 +1,11 @@
<configuration>
<system.webServer>
<security>
<requestFiltering>
<hiddenSegments>
<add segment="silverstripe_version" />
</hiddenSegments>
</requestFiltering>
</security>
</system.webServer>
</configuration>