WordPress.org
Get WordPress

Make WordPress Core

Opened 9 years ago

Last modified 9 years ago

#42328 new defect (bug)

directory listing, missing index.html

Reported by: rolandinsh Owned by:
Priority: normal Milestone: Awaiting Review
Component: Rewrite Rules Version: 4.8.2
Severity: normal Keywords:
Cc: Focuses: administration

Description (last modified by SergeyBiryukov)

On hostings where missing "Options -Indexes" (Apache) index.php file with "Silence is golden." could be an option or as discussed in #4759 as it will work also on NGINX.

While by default it's not a security issue, however, may lead to a discovery of private/non-for-public files.

Directories:
/wp-includes/
/wp-content/uploads/
/wp-content/languages/ (I know it's not by default here)

possible related: #17619

Change History (2)

#1 @SergeyBiryukov
9 years ago

  • Description modified (diff)
Note: See TracTickets for help on using tickets.