From 56d6a2915c5858777231c8755411d6ed8efbacff Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Lo=C3=AFc=20CORBASSON?= Date: Mon, 14 Dec 2015 22:12:57 +0100 Subject: [PATCH] Add a .htaccess restricting access to localhost by default to the check and displaylog plugins, to avoid revealing sensitive information without knowing --- plugins/check/.htaccess | 5 +++++ plugins/displaylog/.htaccess | 5 +++++ 2 files changed, 10 insertions(+) create mode 100644 plugins/check/.htaccess create mode 100644 plugins/displaylog/.htaccess diff --git a/plugins/check/.htaccess b/plugins/check/.htaccess new file mode 100644 index 0000000..3636565 --- /dev/null +++ b/plugins/check/.htaccess @@ -0,0 +1,5 @@ +Order deny,allow +Deny from all +Allow from localhost +Allow from 127.0.0.1 +Allow from ::1 diff --git a/plugins/displaylog/.htaccess b/plugins/displaylog/.htaccess new file mode 100644 index 0000000..3636565 --- /dev/null +++ b/plugins/displaylog/.htaccess @@ -0,0 +1,5 @@ +Order deny,allow +Deny from all +Allow from localhost +Allow from 127.0.0.1 +Allow from ::1