[wp-trac] [WordPress Trac] #42328: directory listing, missing index.html
WordPress Trac
noreply at wordpress.org
Tue Oct 24 22:17:02 UTC 2017
#42328: directory listing, missing index.html
----------------------------+-----------------------------
Reporter: rolandinsh | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Rewrite Rules | Version: 4.8.2
Severity: normal | Keywords:
Focuses: administration |
----------------------------+-----------------------------
On hostings where missing "Options -Indexes" (Apache) index.php file with
"Silence is golden." could be an option or as discussed in
https://core.trac.wordpress.org/ticket/4759 as it will work also on NGINX.
While by default it's not a security issue, however, may lead to a
discovery of private/non-for-public files.
Directories:
/wp-includes/
/wp-content/uploads/
/wp-content/languages/ (I know it's not by default here)
possible related: https://core.trac.wordpress.org/ticket/17619
--
Ticket URL: <https://core.trac.wordpress.org/ticket/42328>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list