FOSSBilling

admin/FOSSBilling

0 Fork 0

mirror of https://github.com/FOSSBilling/FOSSBilling.git synced 2026-11-04 11:07:37 +09:00

Commit Graph

Author	SHA1	Message	Date
Adam Daley	ac97cf2796	Make cron CLI-only and deny non-entry PHP in DDEV nginx (#4348 ) * Make cron CLI-only and deny non-entry PHP in DDEV nginx * Assert terminating action in cron guard test	2026-09-17 21:17:09 +01:00
Adam Daley	352a597b22	Protect nested theme configuration directories (#4346 ) * 🔒 Protect nested theme configuration directories * Fix WebServerSecurityConfigTest to only assert shipped Apache config The Nginx dataset read .ddev/nginx/fossbilling-security.conf, which is dev-only and isn't copied into the CI Docker test image (Dockerfile test stage only copies src, tests, and composer/phpunit configs, and .ddev is also dockerignored). file_get_contents returned false there, failing the Nginx case. Keep the .ddev hardening in place, but only test src/.htaccess.	2026-09-17 19:50:02 +01:00

Author

SHA1

Message

Date

Adam Daley

ac97cf2796

Make cron CLI-only and deny non-entry PHP in DDEV nginx (#4348 )

* Make cron CLI-only and deny non-entry PHP in DDEV nginx

* Assert terminating action in cron guard test

2026-09-17 21:17:09 +01:00

Adam Daley

352a597b22

Protect nested theme configuration directories (#4346 )

* 🔒 Protect nested theme configuration directories

* Fix WebServerSecurityConfigTest to only assert shipped Apache config

The Nginx dataset read .ddev/nginx/fossbilling-security.conf, which is
dev-only and isn't copied into the CI Docker test image (Dockerfile test
stage only copies src, tests, and composer/phpunit configs, and .ddev is
also dockerignored). file_get_contents returned false there, failing the
Nginx case. Keep the .ddev hardening in place, but only test src/.htaccess.

2026-09-17 19:50:02 +01:00