Project

General

Profile

Actions
Copy link

Task #84255

closed

sysext/core/Documentation is not protected by .htaccess

Added by Simon Gilli about 6 years ago. Updated about 6 years ago.

Status:
Rejected
Priority:
Should have
Assignee:
-
Category:
Security
Target version:
8.7.12
Start date:
2018-03-14
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
8
PHP Version:
7.2
Tags:
Complexity:
Sprint Focus:

Description

The folder sysext/core/Documentation/Changelog is protected by .htaccess but not it's parent. I think it should be protected to so nobody is able to get more specific information about the installed core.

Actions
Copy link
 #1

Updated by Simon Gilli about 6 years ago

Thanks to the hint of Markus Klein, this is now default behavior in the shipped .htaccess. I used an older version of it.

So please close this issue.

Actions
Copy link
 #2

Updated by Andreas Kienast about 6 years ago

  • Status changed from New to Rejected
  • Assignee deleted (Helmut Hummel)
Actions
Copy link

Also available in: Atom PDF