Make WordPress Core


Ignore:
Timestamp:
01/27/2021 11:47:43 PM (3 years ago)
Author:
whyisjake
Message:

Privacy: Ensure that exported user data reports can't be found with directory listings.

By moving from .html to .php files, we can prevent directory listings, and ensure that WordPress can load.

This brings the changes from [50037] to the 5.6 branch.

Fixes #52299.

Props lucasbustamante, xkon, freewebmentor, SergeyBiryukov, whyisjake.

Location:
branches/5.6
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/5.6

  • branches/5.6/tests/phpunit/tests/privacy/wpPrivacyGeneratePersonalDataExportFile.php

    r49603 r50038  
    215215
    216216    /**
    217      * Test that an index.html file can be added to the export directory.
     217     * Test that an index.php file can be added to the export directory.
    218218     *
    219219     * @ticket 44233
     
    223223        wp_privacy_generate_personal_data_export_file( self::$export_request_id );
    224224
    225         $this->assertTrue( file_exists( self::$exports_dir . 'index.html' ) );
     225        $this->assertTrue( file_exists( self::$exports_dir . 'index.php' ) );
    226226    }
    227227
Note: See TracChangeset for help on using the changeset viewer.