Closed Bug 1199865 Opened 11 years ago Closed 11 years ago

world readable .htaccess on mozorg.cdn.mozilla.net

Categories

(www.mozilla.org :: General, defect)

Product:
www.mozilla.org
Component:
General
Version:
Production
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: geeknik, Unassigned)

References

(
URL
)

Details

This is normally an information disclosure security issue, but this .htaccess doesn't really include anything worth talking about, but the fact that https://mozorg.cdn.mozilla.net/media/.htaccess is world readable does indicate a server misconfiguration and thus should be fixed.
It's public, actually: https://github.com/mozilla/bedrock/blob/master/static/.htaccess
Component: Other → General
Product: Websites → www.mozilla.org
(In reply to Kohei Yoshino [:kohei] from comment #1) > It's public, actually: > > https://github.com/mozilla/bedrock/blob/master/static/.htaccess Wontfixing
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.