Closed Bug 1200518 Opened 10 years ago Closed 9 years ago

/icons from apache server available under www.mozilla.org

Categories

(www.mozilla.org :: General, defect)

Product:
www.mozilla.org
Component:
General
Version:
Production
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED WORKSFORME

People

(Reporter: hectorz, Unassigned)

References

(
URL
)

Details

(Whiteboard: [kb=1850271] )

Beijing office received a "risk assessment" from cyber-security unit of local police earlier today. The assessment suggests directory listing should be disabled for https://www.mozilla.org/icons/ & https://www.mozilla.org/icons/small/. IIUC, /icons/ comes from apache server. If we're not using it, maybe it's worth to disable the icons alias in apache configuration. Thanks.
That's very kind of them, but surely that list is available in VCS somewhere.
Whiteboard: [kb=1850271]
Looks like this is no longer the case, maybe as result of mozilla.org moving to Deis?
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → WORKSFORME
Only some of the traffic has moved to Deis, if your request goes to the site instance in our datacenter then you do still get the directory listing. This will be fixed soon when we change how the site is deployed in the datacenter this quarter, but it does still exist for now.
You need to log in before you can comment on or make changes to this bug.