Skip to content

Add httpd configuration for basic security

Alexandre Lossent requested to merge alossent/wordpress-image:wordpress-basic-security into master

Following security team report:

From the CERN WhiteHat challenge, it was found that the URL https://some_wordpress_site.web.cern.ch/.wp-config.php.swp discloses secret key and database information. Also, the URL https://some_wordpress_site.web.cern.ch/wp-includes/ has directory listings enabled, making it possible to explore web server contents.

Merge request reports