E.Noorlander/CodePress
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Security fixes n.a.v. pentest op noorlander.info

Browse Source 
- CSRF token toegevoegd aan admin login formulier
- Directory listing uitgeschakeld (Options -Indexes)
- Secure/SameSite=Strict cookie verbeterd in AdminAuth
- app.js.backup en source maps verwijderd
- Version disclosure configureerbaar via config.json
- .map en backup extensies geblokkeerd in .htaccess
This commit is contained in:
E.Noorlander
2026-07-14 14:25:04 +02:00
parent 4d2e11e419
commit c6c2fdb67b
11 changed files with 46 additions and 767 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cms/core/class/CodePressCMS.php
+1 -1
View File
@@ -1027,7 +1027,7 @@ private function getGuidePage() {
'author_git' => 'https://git.noorlander.info/E.Noorlander',
'seo_description' => $this->config['seo']['description'] ?? 'CodePress CMS - Lightweight file-based content management system',
'seo_keywords' => $this->config['seo']['keywords'] ?? 'cms, php, content management, file-based',
'cms_version' => isset($this->config['version_info']) ? 'v' . $this->config['version_info']['version'] : '',
'cms_version' => ($this->config['show_version'] ?? true) && isset($this->config['version_info']) ? 'v' . $this->config['version_info']['version'] : '',
// Theme colors
'header_color' => $this->config['theme']['header_color'] ?? '#0d6efd',
'header_font_color' => $this->config['theme']['header_font_color'] ?? '#ffffff',