diff options
| author | Stefan Giehl <stefan@matomo.org> | 2022-04-13 10:48:39 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-04-13 10:48:39 +0300 |
| commit | 1adc3ab6936fd5ff1874368bcc625b25831362ec (patch) | |
| tree | 6e3a702a200ceb43c99bef03553ae34783a05f59 | |
| parent | fb27f95d1885e97ea16335b73a49c913f14acad9 (diff) | |
Remove json from list of static files in htaccess files (#19051)
* Remove json files from static file list to serve
* Update changelog
| -rw-r--r-- | CHANGELOG.md | 6 | ||||
| -rw-r--r-- | plugins/Installation/ServerFilesGenerator.php | 2 |
2 files changed, 7 insertions, 1 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md index 201cf994f4..c7a2a0c131 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,12 @@ This is the Developer Changelog for Matomo platform developers. All changes in o The Product Changelog at **[matomo.org/changelog](https://matomo.org/changelog)** lets you see more details about any Matomo release, such as the list of new guides and FAQs, security fixes, and links to all closed issues. +## Matomo 4.10.0 + +### Breaking Changes + +* As access to files like `plugin.json` might reveal version details, `json` files will now longer be considered as static files that can be served safely. Therefore `json` will no longer be included in the list of static file extensions in generated `.htaccess` files. + ## Matomo 4.8.0 ### New config.ini.php settings diff --git a/plugins/Installation/ServerFilesGenerator.php b/plugins/Installation/ServerFilesGenerator.php index 45a072080f..9c14da60be 100644 --- a/plugins/Installation/ServerFilesGenerator.php +++ b/plugins/Installation/ServerFilesGenerator.php @@ -44,7 +44,7 @@ class ServerFilesGenerator "</IfModule>\n\n" . "# Allow to serve static files which are safe\n" . - "<Files ~ \"\\.(gif|ico|jpg|png|svg|js|css|htm|html|mp3|mp4|wav|ogg|avi|ttf|eot|woff|woff2|json)$\">\n" . + "<Files ~ \"\\.(gif|ico|jpg|png|svg|js|css|htm|html|mp3|mp4|wav|ogg|avi|ttf|eot|woff|woff2)$\">\n" . $allow . "\n" . "</Files>\n"; |