Security fixes n.a.v. pentest op noorlander.info

- CSRF token toegevoegd aan admin login formulier
- Directory listing uitgeschakeld (Options -Indexes)
- Secure/SameSite=Strict cookie verbeterd in AdminAuth
- app.js.backup en source maps verwijderd
- Version disclosure configureerbaar via config.json
- .map en backup extensies geblokkeerd in .htaccess
This commit is contained in:
2026-07-14 14:25:04 +02:00
parent e14f418e63
commit d5bd0097ff
11 changed files with 46 additions and 767 deletions
+1
View File
@@ -19,6 +19,7 @@
"name": "E. Noorlander",
"website": "https:\/\/noorlander.info"
},
"show_version": false,
"features": {
"auto_link_pages": true,
"search_enabled": true,