Skip to content

Harden data and config protection .htaccess #16792

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
rullzer merged 10 commits into from
Dec 19, 2019
Merged

Harden data and config protection .htaccess #16792

Changes from 1 commit
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
dcbf8fa
Harden data protection .htaccess
MichaIng Aug 19, 2019
e84cdc6
Harden config protection .htaccess
MichaIng Aug 19, 2019
01b558c
Update lib/private/Setup.php
MichaIng Aug 19, 2019
a849b32
Use syntax with cases according to official docs
MichaIng Aug 19, 2019
51a35bb
Minor syntax
MichaIng Aug 19, 2019
2411455
Apache 2.5 will be released as 2.6
MichaIng Aug 19, 2019
592eecd
Add "Order" to assure that no parental "Allow" can grant access
MichaIng Sep 26, 2019
c7e66ec
Add "Order" to assure that no parental "Allow" can grant access
MichaIng Sep 26, 2019
5afd7ab
Add missing newlines to .htaccess
MichaIng Oct 31, 2019
4384806
Merge branch 'master' into patch-1
MichaIng Dec 4, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Use syntax with cases according to official docs 
+ Ref: https://github.com/nextcloud/server/pull/16792/files#r315207691

Signed-off-by: Micha Felle <[email protected]>
  • Loading branch information
@MichaIng
MichaIng authored Aug 19, 2019
commit a849b329a74186d2b2ff79af4b14fa511d010802
24 changes: 12 additions & 12 deletions config/.htaccess
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,23 +1,23 @@
# Section for Apache 2.4 and 2.5
<ifModule mod_authz_core.c>
<IfModule mod_authz_core.c>
Require all denied
</ifModule>
<ifModule mod_access_compat.c>
</IfModule>
<IfModule mod_access_compat.c>
Deny from all
Satisfy All
</ifModule>
</IfModule>

# Section for Apache 2.2
<ifModule !mod_authz_core.c>
<ifModule !mod_access_compat.c>
<ifModule mod_authz_host.c>
<IfModule !mod_authz_core.c>
<IfModule !mod_access_compat.c>
<IfModule mod_authz_host.c>
Deny from all
</ifModule>
</IfModule>
Satisfy All
</ifModule>
</ifModule>
</IfModule>
</IfModule>

# Section for Apache 2.2 to 2.5
<ifModule mod_autoindex.c>
<IfModule mod_autoindex.c>
IndexIgnore *
</ifModule>
</IfModule>