chamilo
/
chamilo-lms
mirror of https://github.com/chamilo/chamilo-lms/tree/1.11.x
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

Security: Add redirect to .htaccess to avoid direct access to bigupload temporary upload directory

Browse Source
pull/4909/head
Yannick Warnier 2 years ago
parent f3d62b65ad
commit e864127a44
1 changed files with 4 additions and 0 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 4
      .htaccess

4
.htaccess
Unescape View File

@ -117,6 +117,10 @@ AddType application/font-woff .woff .woff2
# Header always set Content-Security-Policy "upgrade-insecure-requests;" # Header always set Content-Security-Policy "upgrade-insecure-requests;"
#</IfModule> #</IfModule>
# Disallow direct access to /main/inc/lib/javascript/bigupload/files
RedirectMatch 403 ^/main/inc/lib/javascript/bigupload/files
# Disallow MIME sniffing to prevent XSS from unknown/incorrect file extensions
<IfModule mod_headers.c> <IfModule mod_headers.c>
Header always set X-Content-Type-Options nosniff Header always set X-Content-Type-Options nosniff
</IfModule> </IfModule>

Write Preview
Loading…
Cancel
Save