BUGFIX Disallow web access to sapphire/silverstripe_version to avoid …

…information leakage (from r114773) git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/branches/2.4@114774 467b73ca-7a2a-4603-9d3b-597d59a354a9
silverstripe · Feb 2, 2011 · 872e188 · 872e188
1 parent 397bbe7
commit 872e188
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/.htaccess b/.htaccess
@@ -3,4 +3,7 @@
 </FilesMatch>
 <FilesMatch "(main|static-main|rpc)\.php$">
 	Allow from all
+</FilesMatch>
+<FilesMatch "silverstripe_version$">
+	Deny from all
 </FilesMatch>
diff --git a/web.config b/web.config
@@ -0,0 +1,11 @@
+<configuration>
+	<system.webServer>
+		<security>
+			<requestFiltering>
+				<hiddenSegments>
+					<add segment="silverstripe_version" />
+				</hiddenSegments>
+			</requestFiltering>
+		</security>
+	</system.webServer>
+</configuration>