Security: Prevent directory indexing globally (no reason to enable it…

… for web requests) - refs BT#22085
chamilo · Oct 8, 2024 · 408cdb4 · 408cdb4
1 parent 1d91665
commit 408cdb4
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/.htaccess b/.htaccess
@@ -126,5 +126,9 @@ RedirectMatch 403 ^/main/inc/lib/javascript/bigupload/files
 </IfModule>
 
 <Files "web.config">
-    Require all denied
-</Files>
+  Require all denied
+</Files>
+
+<IfModule mod_autoindex.c>
+  Options -Indexes
+</IfModule>
diff --git a/documentation/installation_guide.html b/documentation/installation_guide.html
@@ -773,6 +773,9 @@ <h3>Apache RewriteRules</h3>
   <Files "web.config">
     Require all denied
   </Files>
+  <IfModule mod_autoindex.c>
+    Options -Indexes
+  </IfModule>
     </pre>
 
     <h4>Special note on sharing questions between courses</h4>
@@ -872,6 +875,7 @@ <h3>Nginx</h3>
     deny all;
     return 403;
   }
+  autoindex off;
     </pre>
 
     <h3>Apple on OS X servers</h3>