Merge pull request #754 from naui95/develop

clockwiseq · web-flow · commit ebbf7e437a1d · 2021-08-16T08:46:30.000-05:00
fix to CVE-2021-29024 #735
diff --git a/uploads/.gitignore b/uploads/.gitignore
@@ -3,4 +3,5 @@
 !customer_files
 !import
 !temp
-!.gitignore
+!.gitignore
+!**/index.html
diff --git a/uploads/archive/.gitignore b/uploads/archive/.gitignore
@@ -1,2 +1,3 @@
 *
-!.gitignore
+!.gitignore
+!**/index.html
diff --git a/uploads/archive/index.html b/uploads/archive/index.html
@@ -0,0 +1,10 @@
+<html>
+<head>
+    <title>403 Forbidden</title>
+</head>
+<body>
+
+<p>Directory access is forbidden.</p>
+
+</body>
+</html>
diff --git a/uploads/customer_files/.gitignore b/uploads/customer_files/.gitignore
@@ -1,3 +1,4 @@
 *
 !.htaccess
 !.gitignore
+!**/index.html
diff --git a/uploads/customer_files/index.html b/uploads/customer_files/index.html
@@ -0,0 +1,10 @@
+<html>
+<head>
+    <title>403 Forbidden</title>
+</head>
+<body>
+
+<p>Directory access is forbidden.</p>
+
+</body>
+</html>
diff --git a/uploads/import/.gitignore b/uploads/import/.gitignore
@@ -1,2 +1,3 @@
 *
-!.gitignore
+!.gitignore
+!**/index.html
diff --git a/uploads/import/index.html b/uploads/import/index.html
@@ -0,0 +1,10 @@
+<html>
+<head>
+    <title>403 Forbidden</title>
+</head>
+<body>
+
+<p>Directory access is forbidden.</p>
+
+</body>
+</html>
diff --git a/uploads/index.html b/uploads/index.html
@@ -0,0 +1,10 @@
+<html>
+<head>
+    <title>403 Forbidden</title>
+</head>
+<body>
+
+<p>Directory access is forbidden.</p>
+
+</body>
+</html>
diff --git a/uploads/temp/.gitignore b/uploads/temp/.gitignore
@@ -2,3 +2,4 @@
 !mpdf
 !.gitignore
 !.htaccess
+!**/index.html
diff --git a/uploads/temp/index.html b/uploads/temp/index.html
@@ -0,0 +1,10 @@
+<html>
+<head>
+    <title>403 Forbidden</title>
+</head>
+<body>
+
+<p>Directory access is forbidden.</p>
+
+</body>
+</html>
diff --git a/uploads/temp/mpdf/.gitignore b/uploads/temp/mpdf/.gitignore
@@ -1,2 +1,3 @@
 *
-!.gitignore
+!.gitignore
+!**/index.html
diff --git a/uploads/temp/mpdf/index.html b/uploads/temp/mpdf/index.html
@@ -0,0 +1,10 @@
+<html>
+<head>
+    <title>403 Forbidden</title>
+</head>
+<body>
+
+<p>Directory access is forbidden.</p>
+
+</body>
+</html>

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,3 @@`
`1`	`1`	`*`
`2`		`-!.gitignore`
	`2`	`+!.gitignore`
	`3`	`+!**/index.html`
-Original file line number
+Diff line change
@@ @@ -0,0 +1,10 @@ @@
 +<html>
 +<head>
 +    <title>403 Forbidden</title>
 +</head>
 +<body>
++
 +<p>Directory access is forbidden.</p>
++
 +</body>
 +</html>
Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,4 @@`
`1`	`1`	`*`
`2`	`2`	`!.htaccess`
`3`	`3`	`!.gitignore`
	`4`	`+!**/index.html`