mirror of
https://github.com/silverstripe/silverstripe-reports
synced 2024-10-05 23:58:42 +02:00
BUGFIX Disallow web access to cms/silverstripe_version to avoid information leakage (from r114770)
git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/cms/branches/2.4@114771 467b73ca-7a2a-4603-9d3b-597d59a354a9
This commit is contained in:
parent
375151c14d
commit
357b868b4f
@ -1,3 +1,6 @@
|
|||||||
<FilesMatch "\.(php|php3|php4|php5|phtml|inc)$">
|
<FilesMatch "\.(php|php3|php4|php5|phtml|inc)$">
|
||||||
Deny from all
|
Deny from all
|
||||||
</FilesMatch>
|
</FilesMatch>
|
||||||
|
<FilesMatch "silverstripe_version$">
|
||||||
|
Deny from all
|
||||||
|
</FilesMatch>
|
11
web.config
Normal file
11
web.config
Normal file
@ -0,0 +1,11 @@
|
|||||||
|
<configuration>
|
||||||
|
<system.webServer>
|
||||||
|
<security>
|
||||||
|
<requestFiltering>
|
||||||
|
<hiddenSegments>
|
||||||
|
<add segment="silverstripe_version" />
|
||||||
|
</hiddenSegments>
|
||||||
|
</requestFiltering>
|
||||||
|
</security>
|
||||||
|
</system.webServer>
|
||||||
|
</configuration>
|
Loading…
Reference in New Issue
Block a user