Bug #83703
closed
Protect ext_typoscript_setup.typoscript ext_typoscript_constants.typoscript
100%
Description
As ext_typoscript_setup.typoscript ext_typoscript_constants.typoscript are recommended, they should not be accessible throw the webserver.
Therefore the _.htaccess and _web.config should have rules to deny them.
Updated by Oliver Hader about 6 years ago
- Status changed from New to Accepted
- TYPO3 Version changed from 9 to 7
Updated by Gerrit Code Review about 6 years ago
- Status changed from Accepted to Under Review
Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/55485
Updated by Gerrit Code Review about 6 years ago
Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/55485
Updated by Tymoteusz Motylewski about 6 years ago
Protection for v8 and v9 was added in this patch - https://review.typo3.org/50096
I've tested it with Apache and worked fine.
I'll push a patch for v7.
Updated by Gerrit Code Review about 6 years ago
Patch set 1 for branch TYPO3_7-6 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/55626
Updated by Tymoteusz Motylewski about 6 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset a37c3ea5f2f59f375302217ac4ecd4ff294d0667.
Updated by