r96210 MediaWiki - Code Review archive

Repository:MediaWiki
Revision:r96209‎ | r96210 | r96211 >
Date:19:39, 3 September 2011
Author:platonides
Status:deferred
Tags:
Comment:
Nothing in the folder of timeline extension is intended for being
accessed directly from the web. Add a .htaccess blocking it, in
case some servers config could lead to a vulnerability with EasyTimeline.pl
or the ploticus binary (if placed here).
Modified paths:
  • /trunk/extensions/timeline/.htaccess (added) (history)

Diff [purge]

Index: trunk/extensions/timeline/.htaccess
@@ -0,0 +1 @@
 2+Deny from all

Status & tagging log