Maybe sufficient, but I doubt it; the warning seems to apply to just the
existence of the directory (whether browsing is denied or not). Ugly, most
definitely. I never want unnecessary code (documentation, test files, etc)
deployed on production servers if I can help it. Just too much of a hole
The current configuration denies browse access to directories in IIS (it will
return 403.14). Yet to find out what happens for Apache.
Is this not sufficient?
- Jackie
--
View this message in context:
Yeah, just confirming Apache also returns 403 on directory access as well
(including .svn dirs)
So just re-iterating that question. Is it not sufficient?
- Jackie
--
View this message in context:
It pokes for various known directories all over the site; just adds them to
known good URLs. All kinds of stupid requests for things like cold fusion
admin directories, info.php, cmd.exe, etc.
I'm not sure how you would tie them to a feature (it's been a while since I
poked in WiX) while
Great :)
I've never downloaded part of Mapguide as you suggest. Do I have to follow
instructions here http://trac.osgeo.org/mapguide/wiki/HowToGetTheSourceCode?
Best regards
-Messaggio originale-
Da: mapguide-users-boun...@lists.osgeo.org
You just need to install a svn client (eg. TortoiseSVN) and have some basic
knowledge about subversion.
- Jackie
--
View this message in context:
http://osgeo-org.1560.n6.nabble.com/Mapguide-beta-2-4-quick-plot-on-a-basic-layout-from-net-app-does-not-work-tp4849088p4854882.html
Sent from the
A: mapguide-users@lists.osgeo.org
Oggetto: Re: R: [mapguide-users] Re: Mapguide beta 2.4: quick plot on a
basic layout from .net app does not work
You just need to install a svn client (eg. TortoiseSVN) and have some basic
knowledge about subversion.
- Jackie
--
View this message in context:
http
Nononononono.
You do not have to check out any source code. There is nothing to compile.
The directories under the www dir of your MapGuide installation are svn
working copies. They're effectively *the* source code. Most of these files
are web pages, css, images and javascript files, things that
Jackie, is there an option not to install the .svn directories during the
install?
We have an external web scanning service that checks our public facing
network for compliance with credit card company rules, and it fails us if
it finds .svn directories (among millions of other things).
Jason
Unless there is an easy way in wix to tie all .svn directories to a
particular MSI feature (because these dirs are all over the place, and not
in one single place), then the answer is no.
You'll just have to wipe out all the .svn directories under the www
directory post-install
- Jackie
--
View
out of interest, how would an external scanning service discover a
.svn directory
unless you have directory indexes available?
I think some folders under apache still are? ( I never use IIS myself )
We should also configure webserver rules to block access to the svn metadata
when the RFC was
11 matches
Mail list logo
