mirror of
https://github.com/silverstripe/silverstripe-installer
synced 2024-10-22 17:05:33 +02:00
98135df7d3
Since SS3 keeps values in configuration, direct access to known paths might expose them
18 lines
497 B
Plaintext
18 lines
497 B
Plaintext
<configuration>
|
|
<system.webServer>
|
|
<security>
|
|
<requestFiltering>
|
|
<hiddenSegments>
|
|
<add segment="silverstripe-cache/" />
|
|
<add segment="vendor" />
|
|
<add segment="composer.json" />
|
|
<add segment="composer.lock" />
|
|
</hiddenSegments>
|
|
<fileExtensions allowUnlisted="true" >
|
|
<add fileExtension=".ss" allowed="false"/>
|
|
<add fileExtension=".yml" allowed="false"/>
|
|
</fileExtensions>
|
|
</requestFiltering>
|
|
</security>
|
|
</system.webServer>
|
|
</configuration> |