mirror of
https://github.com/Combodo/iTop.git
synced 2026-02-13 07:24:13 +01:00
N°2435.3 Security hardening: Avoid direct access to lib directory
This commit is contained in:
13
lib/.htaccess
Normal file
13
lib/.htaccess
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
# Apache 2.4
|
||||||
|
<ifModule mod_authz_core.c>
|
||||||
|
Require all denied
|
||||||
|
</ifModule>
|
||||||
|
|
||||||
|
# Apache 2.2
|
||||||
|
<ifModule !mod_authz_core.c>
|
||||||
|
deny from all
|
||||||
|
Satisfy All
|
||||||
|
</ifModule>
|
||||||
|
|
||||||
|
# Apache 2.2 and 2.4
|
||||||
|
IndexIgnore *
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
## Libraries structure
|
|
||||||
|
|
||||||
* `/lib/composer-vendor/*` Libs managed by the composer.json file.
|
|
||||||
* `/lib/*` Libs managed manually by us. Some have been forked, some patched. Might move to composer eventually.
|
|
||||||
8
lib/web.config
Normal file
8
lib/web.config
Normal file
@@ -0,0 +1,8 @@
|
|||||||
|
<?xml version="1.0" encoding="utf-8" ?>
|
||||||
|
<configuration>
|
||||||
|
<system.web>
|
||||||
|
<authorization>
|
||||||
|
<deny users="*" /> <!-- Denies all users -->
|
||||||
|
</authorization>
|
||||||
|
</system.web>
|
||||||
|
</configuration>
|
||||||
Reference in New Issue
Block a user