N°5462 Add a setup check to verify if directory-level configuration files (.htaccess and web.config) are used by the server

This commit is contained in:
Stephen Abello
2022-08-24 16:33:54 +02:00
parent f923ac879f
commit 14facb4d6c
5 changed files with 40 additions and 0 deletions

View File

@@ -53,4 +53,17 @@ function ExecuteStep(sStep)
} );
}
function CheckDirectoryConfFilesPermissions(sWikiVersion){
$.ajax('permissions-test-folder/permissions-test-subfolder/permissions-test-file',
{
statusCode: {
200: function() {
$('#details').prepend('<div class="message message-warning"><span class="message-title">Security issue:</span> iTop is bundled with directory-level configuration files. You must check that those files will be read by your web server (eg. ' +
'AllowOverride directive should be set to <code>All</code> for Apache HTTP Server) <a href="https://www.itophub.io/wiki/page?id='+sWikiVersion+'%3Ainstall%3Asecurity#secure_critical_directories_access" target="_blank">see documentation</a>.</div>');
$('<span class="text-warning"> and 1 Security issue</span>').insertBefore('h2.message button:first');
}
}
});
}
CombodoTooltip.InitAllNonInstantiatedTooltips();