This forum has moved to a new location and is in read-only mode. Please visit talk.octobercms.com to access the new location.

Keios

Currently it's possible to download all and every .yaml file from plugins and modules folders. Those files contain database field definitions and shouldn't be available publicly. Daftspunk, please update nginx rules with:

location ~* (\.yaml) 
{
    return 404;
}
andrew

Everything within the app folder is already blocked.

Edit

I see what you mean. I'll add a pull request.

Last updated

1-2 of 2

You cannot edit posts or make replies: the forum has moved to talk.octobercms.com.