Make WordPress Core

Opened 7 years ago

Last modified 7 years ago

#42328 new defect (bug)

directory listing, missing index.html

Reported by: rolandinsh's profile rolandinsh Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version: 4.8.2
Component: Rewrite Rules Keywords:
Focuses: administration Cc:

Description (last modified by SergeyBiryukov)

On hostings where missing "Options -Indexes" (Apache) index.php file with "Silence is golden." could be an option or as discussed in #4759 as it will work also on NGINX.

While by default it's not a security issue, however, may lead to a discovery of private/non-for-public files.

Directories:
/wp-includes/
/wp-content/uploads/
/wp-content/languages/ (I know it's not by default here)

possible related: #17619

Change History (2)

#1 @SergeyBiryukov
7 years ago

  • Description modified (diff)
Note: See TracTickets for help on using tickets.