Opened 7 years ago
Last modified 7 years ago
#42328 new defect (bug)
directory listing, missing index.html
Reported by: | rolandinsh | Owned by: | |
---|---|---|---|
Milestone: | Awaiting Review | Priority: | normal |
Severity: | normal | Version: | 4.8.2 |
Component: | Rewrite Rules | Keywords: | |
Focuses: | administration | Cc: |
Description (last modified by )
On hostings where missing "Options -Indexes" (Apache) index.php file with "Silence is golden." could be an option or as discussed in #4759 as it will work also on NGINX.
While by default it's not a security issue, however, may lead to a discovery of private/non-for-public files.
Directories:
/wp-includes/
/wp-content/uploads/
/wp-content/languages/ (I know it's not by default here)
possible related: #17619
Note: See
TracTickets for help on using
tickets.
Related: #18546