View Issue Details

IDProjectCategoryView StatusLast Update
0017380mantisbtsecuritypublic2014-12-08 00:34
Reportergrangeway Assigned Tograngeway  
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Product Version1.3.0-beta.1 
Target Version1.3.0-beta.1Fixed in Version1.3.0-beta.1 
Summary0017380: IIS: add web.config to deny access to config/
Description

Add a default web.config that attempts to deny access to the config/* folders.

Note: this may require URL authorization to be enabled in IIS7

TagsNo tags attached.

Relationships

related to 0017510 closedatrol test_langs throws errors 

Activities

There are no notes attached to this issue.

Related Changesets

MantisBT: master 78cee358

2014-05-29 05:59

Paul Richards


Details Diff
Fix 0017380: IIS: add web.config to deny access to config/ Affected Issues
0014538, 0017380
add - config/Web.config Diff File
add - core/Web.config Diff File
add - doc/Web.config Diff File
add - lang/Web.config Diff File
add - library/Web.config Diff File
add - packages/Web.config Diff File
add - plugins/.htaccess Diff File
add - plugins/Web.config Diff File
add - scripts/.htaccess Diff File
add - scripts/Web.config Diff File