From 929eccc88d35f1fbe76885819bd8a9de082f9732 Mon Sep 17 00:00:00 2001
From: Molkobain <lajarige.guillaume@free.fr>
Date: Mon, 27 Jul 2020 14:44:02 +0200
Subject: [PATCH] Protect directory listing of /mode_modules

---
 node_modules/.htaccess  | 21 +++++++++++++++++++++
 node_modules/web.config | 31 +++++++++++++++++++++++++++++++
 2 files changed, 52 insertions(+)
 create mode 100644 node_modules/.htaccess
 create mode 100644 node_modules/web.config

diff --git a/node_modules/.htaccess b/node_modules/.htaccess
new file mode 100644
index 000000000..af1631e4f
--- /dev/null
+++ b/node_modules/.htaccess
@@ -0,0 +1,21 @@
+
+# Apache 2.4
+<ifModule mod_authz_core.c>
+Require all denied
+	<FilesMatch ".+\.(css|scss|js|map|png|bmp|gif|jpe?g|svg|tiff|woff2?|ttf|eot|html|php)$">
+	    Require all granted
+	</FilesMatch>
+</ifModule>
+
+# Apache 2.2
+<ifModule !mod_authz_core.c>
+deny from all
+Satisfy All
+	<FilesMatch ".+\.(css|scss|js|map|png|bmp|gif|jpe?g|svg|tiff|woff2?|ttf|eot|html|php)$">
+	    Order Allow,Deny
+	    Allow from all
+	</FilesMatch>
+</ifModule>
+
+# Apache 2.2 and 2.4
+IndexIgnore *
diff --git a/node_modules/web.config b/node_modules/web.config
new file mode 100644
index 000000000..9667892e3
--- /dev/null
+++ b/node_modules/web.config
@@ -0,0 +1,31 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<configuration>
+  <system.webServer>
+      <security>
+         <requestFiltering>
+            <fileExtensions applyToWebDAV="false" allowUnlisted="false" >
+               <add fileExtension=".css" allowed="true" />
+               <add fileExtension=".scss" allowed="true" />
+               <add fileExtension=".js" allowed="true" />
+               <add fileExtension=".map" allowed="true" />
+               <add fileExtension=".png" allowed="true" />
+               <add fileExtension=".bmp" allowed="true" />
+               <add fileExtension=".gif" allowed="true" />
+               <add fileExtension=".jpeg" allowed="true" />
+               <add fileExtension=".jpg" allowed="true" />
+               <add fileExtension=".svg" allowed="true" />
+               <add fileExtension=".tiff" allowed="true" />
+               
+               <add fileExtension=".woff" allowed="true" />
+               <add fileExtension=".woff2" allowed="true" />
+               <add fileExtension=".ttf" allowed="true" />
+               <add fileExtension=".eot" allowed="true" />
+               
+               <add fileExtension=".html" allowed="true" />
+               
+               <add fileExtension=".php" allowed="true" />
+            </fileExtensions>
+         </requestFiltering>
+      </security>
+  </system.webServer>
+</configuration>