[wp-trac] [WordPress Trac] #30806: Security: Full Path Disclosure

[WordPress Trac]

#30806: Security: Full Path Disclosure
-----------------------------+----------------------
 Reporter:  smartifahrer     |       Owner:
     Type:  feature request  |      Status:  closed
 Priority:  normal           |   Milestone:
Component:  Security         |     Version:  4.1
 Severity:  normal           |  Resolution:  invalid
 Keywords:                   |     Focuses:
-----------------------------+----------------------
Changes (by ocean90):

 * status:  new => closed
 * resolution:   => invalid
 * milestone:  Awaiting Review =>


Comment:

 See the [https://make.wordpress.org/core/handbook/reporting-security-
 vulnerabilities/ Security FAQ]:
 > ''' Why are there path disclosures when directly loading certain
 files?'''
 > This is a server configuration problem. Never enable `display_errors` on
 a production site.

 Additionally, when you created this ticket:
 > '''Do not report potential security vulnerabilities here.''' See the
 [https://make.wordpress.org/core/handbook/reporting-security-
 vulnerabilities/ Security FAQ] and contact security at wordpress.org.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/30806#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform