The process_extending_files in httpd-run script uses a directory that is in the www root
Nobody has claimed this yet.
Assessment
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Newbie friendliness
- 45/100
Research direction
Start with 2.4/root/usr/bin/run-httpd, especially line 16 and the process_extending_files path. Check how the httpd-pre-init directory is used and verify that extending files are still processed while the directory is no longer exposed through the web root. Confirm the behavior with a container-level access check.
Written by the indexing model from the issue text.
Description
Description
In https://github.com/sclorg/httpd-container/blob/4d238482685f3926826d317e0cf18a425f504487/2.4/root/usr/bin/run-httpd line 16 processes extending files, in this path ${HTTPD_APP_ROOT}/src/httpd-pre-init/ but this path is on the path of the www root, which makes the files inside this directory readable through the http/https from outside. Should this not be in ${HTTPD_APP_ROOT}/httpd-pre-init/ so that its content is not available to external clients?
- Dominant language
- Shell
- Stars
- 52
- Forks
- 122
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from sclorg/httpd-container
-
Difficulty 4/5 3-5 days Newbie friendliness 15/100
sclorg/httpd-container#232 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 45/100
sclorg/httpd-container#226 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 25/100
sclorg/httpd-container#169 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 20/100
sclorg/httpd-container#131 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 50/100
sclorg/httpd-container#127 · 1 comment ·
All issues in sclorg/httpd-container
Similar issues
-
Update Vish to 1.1.5 Openpackage-update
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
oSoWoSo/vOid_Community_repOsitory#144 · 1 comment ·
-
help wanted new command
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
tldr-pages/tldr#24151 ·
-
PacReq: Rune IDE Openpackage request
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
pacstall/pacstall-programs#9402 ·
-
[BUG] ci: the first prefetch-images.sh call runs before shard.txt exists, so it is always a no-op Openbug github-actions
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
-
update-request
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
msys2/MINGW-packages#31768 ·