Commit graph

3 commits

Author SHA1 Message Date
Tim Starling
66c2681f7c In .htaccess deny files, use "Satisfy All"
These .htaccess files are intended to prohibit all web access. But if
the user sets "Satisfy Any" on a parent directory, in conjunction with
any permissive require directive like "Require all granted", access will
be allowed despite "Require all denied" in .htaccess.

So, override Satisfy so that the "Require all denied" will reliably take
effect.

Note that "Satisfy All" is the default. This only affects non-default
installations.

Change-Id: Ia5862fb69e439b7ea2ed7af011e1ebf8f1b1f6d6
(cherry picked from commit a50d2e69f8ce9e5720b05615d04c35cc9008b6ae)
2025-04-04 13:17:15 +00:00
Kunal Mehta
903544aabc Update Apache config syntax in .htaccess files
"Deny from all" is deprecated; the replacement syntax has been
available since Apache 2.4 (originally released in 2012).

See <https://httpd.apache.org/docs/2.4/howto/access.html>.

Bug: T360850
Change-Id: I825053ccefe34f6ca4e04af5ad2601f79e4d51a7
2024-03-23 23:36:31 -04:00
Antoine Musso
eb24ecc37b htaccessing some directories for dev using cvs tree as www tree ;) 2004-04-21 23:17:36 +00:00