Maniphest T191597

MediaWiki 1.30.0 tarball is missing vendor/.htaccess
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Legoktm
	Apr 6 2018, 7:28 AM

Tags

Referenced Files

None

Subscribers

Description

The vendor/.htaccess file added in T180237: Have composer create a .htaccess file in vendor director/rMWVDf15c291164a2: Add .htaccess to disallow web access is present in the REL1_30 branch of mediawiki/vendor, but it is not included in the released 1.30.0 tarball.

I noticed that it was missing when reviewing the 1.27.4 -> 1.30.0 diff while updating the Debian package.

Related Objects

Mentioned Here: rMWVDf15c291164a2: Add .htaccess to disallow web access
T180237: Have composer create a .htaccess file in vendor director

Event Timeline

Legoktm created this task.Apr 6 2018, 7:28 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptApr 6 2018, 7:28 AM

Both the 1.27.4 and 1.29.2 tarballs do have the vendor/.htaccess file.

I forgot about this task, but it was fixed in 1.30.1.

Legoktm changed the visibility from "Custom Policy" to "Public (No Login Required)".Sep 21 2018, 3:21 AM

• chasemp added a project: Security.Feb 10 2020, 10:52 PM

• chasemp removed a project: acl*security.Feb 20 2020, 8:13 PM