Protect vendors folder

Fixes #25621
mantisbt · Apr 20, 2019 · 9b07063 · 9b07063
1 parent e21eae5
commit 9b07063
Show file tree

Hide file tree

Showing 2 changed files with 23 additions and 0 deletions.
diff --git a/vendor/.htaccess b/vendor/.htaccess
@@ -0,0 +1,12 @@
+## no access to this folder
+
+# Apache 2.4
+<IfModule mod_authz_core.c>
+	Require all denied
+</IfModule>
+
+# Apache 2.2
+<IfModule !mod_authz_core.c>
+	Order Allow,Deny
+	Deny from all
+</IfModule>
diff --git a/vendor/Web.config b/vendor/Web.config
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<configuration>
+  <system.webServer>
+      <security>
+          <authorization>
+                <remove users="*" roles="" verbs="" />
+                <add accessType="Deny" users="*" />
+          </authorization>
+      </security>
+  </system.webServer>
+</configuration>