Skip to content

bugzilla
bugzilla
Commit 64250f2a authored by Jochen Wiedmann's avatar Jochen Wiedmann Committed by David Lawrence
Browse files
Options

Bug 1121477: Support for Apache HTTPD 2.4

r=dkl,a=glob
parent 98fe0723
Hide whitespace changes
Inline Side-by-side
Showing with 101 additions and 10 deletions
.htaccess
View file @ 64250f2a
# Don't allow people to retrieve non-cgi executable files or our private data
<FilesMatch (\.pm|\.pl|\.tmpl|localconfig.*)$>
deny from all
<IfModule mod_version.c>
<IfVersion <= 2.2>
Deny from all
</IfVersion>
<IfVersion > 2.2>
Require all denied
</IfVersion>
</IfModule>
<IfModule !mod_version.c>
Deny from all
</IfModule>
</FilesMatch>
Options -Indexes
......
Bugzilla/Install/Filesystem.pm
View file @ 64250f2a
......@@ -47,7 +47,17 @@ our @EXPORT = qw(
use constant HT_DEFAULT_DENY => <<EOT;
# nothing in this directory is retrievable unless overridden by an .htaccess
# in a subdirectory
deny from all
<IfModule mod_version.c>
<IfVersion <= 2.2>
Deny from all
</IfVersion>
<IfVersion > 2.2>
Require all denied
</IfVersion>
</IfModule>
<IfModule !mod_version.c>
Deny from all
</IfModule>
EOT
###############
......@@ -340,11 +350,31 @@ EOT
"$graphsdir/.htaccess" => { perms => WS_SERVE, contents => <<EOT
# Allow access to .png and .gif files.
<FilesMatch (\\.gif|\\.png)\$>
Allow from all
<IfModule mod_version.c>
<IfVersion <= 2.2>
Allow from all
</IfVersion>
<IfVersion > 2.2>
Require all granted
</IfVersion>
</IfModule>
<IfModule !mod_version.c>
Allow from all
</IfModule>
</FilesMatch>
# And no directory listings, either.
Deny from all
<IfModule mod_version.c>
<IfVersion <= 2.2>
Deny from all
</IfVersion>
<IfVersion > 2.2>
Require all denied
</IfVersion>
</IfModule>
<IfModule !mod_version.c>
Deny from all
</IfModule>
EOT
},
......@@ -353,28 +383,79 @@ EOT
# generated .dot files. Uncomment this section and replace the IP address with
# the IP address of your webdot server.
#<FilesMatch \\.dot\$>
# Allow from 127.0.0.1/24
# Deny from all
# <IfModule mod_version.c>
# <IfVersion <= 2.2>
# Allow from 127.0.0.1/24
# Deny from all
# </IfVersion>
# <IfVersion > 2.2>
# Require ip 127.0.0.1/24
# Require all denied
# </IfModule>
# <IfModule !mod_version.c>
# Allow from 127.0.0.1/24
# Deny from all
# </IfModule>
#</FilesMatch>
# Allow access to .png files created by a local copy of 'dot'
<FilesMatch \\.png\$>
Allow from all
<IfModule mod_version.c>
<IfVersion <= 2.2>
Allow from all
</IfVersion>
<IfVersion > 2.2>
Require all granted
</IfVersion>
</IfModule>
<IfModule !mod_version.c>
Allow from all
</IfModule>
</FilesMatch>
# And no directory listings, either.
Deny from all
<IfModule mod_version.c>
<IfVersion <= 2.2>
Deny from all
</IfVersion>
<IfVersion > 2.2>
Require all denied
</IfVersion>
</IfModule>
<IfModule !mod_version.c>
Deny from all
</IfModule>
EOT
},
"$assetsdir/.htaccess" => { perms => WS_SERVE, contents => <<EOT
# Allow access to .css files
<FilesMatch \\.(css|js)\$>
Allow from all
<IfModule mod_version.c>
<IfVersion <= 2.2>
Allow from all
</IfVersion>
<IfVersion > 2.2>
Require all granted
</IfVersion>
</IfModule>
<IfModule !mod_version.c>
Allow from all
</IfModule>
</FilesMatch>
# And no directory listings, either.
Deny from all
<IfModule mod_version.c>
<IfVersion <= 2.2>
Deny from all
</IfVersion>
<IfVersion > 2.2>
Require all denied
</IfVersion>
</IfModule>
<IfModule !mod_version.c>
Deny from all
</IfModule>
EOT
},
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment