From b3b42a1fdd1be3f0246e9bc2a46c5810560747bd Mon Sep 17 00:00:00 2001 From: Gunnstein Lye <289744+glye@users.noreply.github.com> Date: Fri, 6 Oct 2023 09:56:24 +0200 Subject: [PATCH 1/2] Link to vhosts in install doc, rather than directly For better access and easier maintenance. --- .../security/security_checklist.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/docs/infrastructure_and_maintenance/security/security_checklist.md b/docs/infrastructure_and_maintenance/security/security_checklist.md index ddce42c185..a73c635655 100644 --- a/docs/infrastructure_and_maintenance/security/security_checklist.md +++ b/docs/infrastructure_and_maintenance/security/security_checklist.md @@ -127,8 +127,7 @@ The default list of blocked file types contains: `hta htm html jar js jse pgif p ### Block execution of scripts in `var` directory Make sure the web server blocks the execution of PHP files and other scripts in the `var` directory. -See the line below `# Disable .php(3) and other executable extensions in the var directory` in the -[virtual host configuration](https://raw.githubusercontent.com/ibexa/post-install/main/resources/templates/apache2/vhost.template). +See the line below `# Disable .php(3) and other executable extensions in the var directory` in the example virtual host files for Apache and Nginx, provided in the [installation documentation](https://doc.ibexa.co/en/latest/getting_started/install_ibexa_dxp/#set-up-virtual-host). ### Use secure password hashing From b533b360b0bdf5f404362dbb3a34079bd36db9e1 Mon Sep 17 00:00:00 2001 From: Justyna Koralewicz <79849375+juskora@users.noreply.github.com> Date: Fri, 6 Oct 2023 12:09:12 +0200 Subject: [PATCH 2/2] Update docs/infrastructure_and_maintenance/security/security_checklist.md MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Tomasz DÄ…browski <64841871+dabrt@users.noreply.github.com> --- .../security/security_checklist.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/infrastructure_and_maintenance/security/security_checklist.md b/docs/infrastructure_and_maintenance/security/security_checklist.md index a73c635655..80f2d6b835 100644 --- a/docs/infrastructure_and_maintenance/security/security_checklist.md +++ b/docs/infrastructure_and_maintenance/security/security_checklist.md @@ -127,7 +127,7 @@ The default list of blocked file types contains: `hta htm html jar js jse pgif p ### Block execution of scripts in `var` directory Make sure the web server blocks the execution of PHP files and other scripts in the `var` directory. -See the line below `# Disable .php(3) and other executable extensions in the var directory` in the example virtual host files for Apache and Nginx, provided in the [installation documentation](https://doc.ibexa.co/en/latest/getting_started/install_ibexa_dxp/#set-up-virtual-host). +See the line below `# Disable .php(3) and other executable extensions in the var directory` in the example virtual host files for Apache and Nginx, provided in the [installation documentation](install_ibexa_dxp.md#set-up-virtual-host). ### Use secure password hashing