[AMOS commit] MDL-59969 admin: Warn admins if a development libs directory exists Committed into Git: 2017-08-29 17:01 UTC

[AMOS commit] MDL-59969 admin: Warn admins if a development libs directory exists Committed into Git: 2017-08-29 17:01 UTC

by AMOS bot -
Number of replies: 0
Author: David Mudrák
MDL-59969 admin: Warn admins if a development libs directory exists
We can't really control the direct web access to directories in dirroot,
that is part of the server setup. So we at least warn admins as they may
not realize the risks of having directories like vendor or node_modules
exposed.

Credit goes to Petr Škoda for mentioning the PHPUnit issue CVE-2017-9841
to me.


http://git.moodle.org/gw?p=moodle.git;a=commit;h=dd2d37247701923a33bf0a66e022126cde86a25e
http://github.com/moodle/moodle/commit/dd2d37247701923a33bf0a66e022126cde86a25e

+ 3.3 en [devlibdirpresent,core_admin]
+ 3.3 en [check_nodemodules_details,report_security]
+ 3.3 en [check_nodemodules_info,report_security]
+ 3.3 en [check_nodemodules_name,report_security]
+ 3.3 en [check_vendordir_details,report_security]
+ 3.3 en [check_vendordir_info,report_security]
+ 3.3 en [check_vendordir_name,report_security]