[TYPO3-core] RFC #11369: jumpUrl should only allow files matching fileDenyPattern

Oliver Hader oliver at typo3.org
Mon Jun 22 14:52:58 CEST 2009


Hi Michael,

Michael Stucki schrieb:
> Attached is a new version which implements a suggestion by Olly to
> disallow access also if the parent directory name is "typo3conf". This
> assures that also backups (*~ etc.) of localconf.php - which we consider
> most delicate - are also unaccessible.

Thanks! +1 on reading - I'm going to test in some minutes...

olly
-- 
Oliver Hader
TYPO3 Release Manager 4.3


More information about the TYPO3-team-core mailing list