Merge pull request phpbb#6677 from marc1706/ticket/16907

[ticket/16907] Adjust request filtering for phpbb paths
marc1706 · Jul 14, 2024 · de660fe · de660fe
2 parents 99c97b9 + 922e769
commit de660fe
Showing 1 changed file with 27 additions and 0 deletions.
diff --git a/phpBB/web.config b/phpBB/web.config
@@ -28,6 +28,33 @@
 			</requestFiltering>
 		</security>
 	</system.webServer>
+	<location path="config">
+		<system.webServer>
+			<security>
+				<requestFiltering>
+					<hiddenSegments>
+						<add segment="default" />
+						<add segment="development" />
+						<add segment="installer" />
+						<add segment="production" />
+						<add segment="test" />
+						<add segment=".htaccess" />
+					</hiddenSegments>
+				</requestFiltering>
+			</security>
+		</system.webServer>
+	</location>
+	<location path="ext">
+		<system.webServer>
+			<security>
+				<requestFiltering>
+					<hiddenSegments>
+						<remove segment="phpbb" />
+					</hiddenSegments>
+				</requestFiltering>
+			</security>
+		</system.webServer>
+	</location>
 	<location path="images/avatars">
 		<system.webServer>
 			<security>