Bugzilla – Attachment 191368 Details for
Bug 40993
Do not allow direct calls of value_builder scripts
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 40993: Update etc/koha-httpd.conf
Bug-40993-Update-etckoha-httpdconf.patch (text/plain), 981 bytes, created by
Lucas Gass (lukeg)
on 2026-01-13 16:00:22 UTC
(
hide
)
Description:
Bug 40993: Update etc/koha-httpd.conf
Filename:
MIME Type:
Creator:
Lucas Gass (lukeg)
Created:
2026-01-13 16:00:22 UTC
Size:
981 bytes
patch
obsolete
>From f3a85e71ef7cccdb385e036b97c8f0e3576ca066 Mon Sep 17 00:00:00 2001 >From: Lucas Gass <lucas@bywatersolutions.com> >Date: Tue, 13 Jan 2026 16:00:02 +0000 >Subject: [PATCH] Bug 40993: Update etc/koha-httpd.conf > >--- > etc/koha-httpd.conf | 3 +++ > 1 file changed, 3 insertions(+) > >diff --git a/etc/koha-httpd.conf b/etc/koha-httpd.conf >index d8254d6bf0b..9ab741ed11f 100644 >--- a/etc/koha-httpd.conf >+++ b/etc/koha-httpd.conf >@@ -227,6 +227,9 @@ > # Protect dev install > RewriteRule ^/cgi-bin/koha/(C4|debian|docs|etc|installer/data|install_misc|Koha|misc|selenium|t|test|tmp|xt)/|\.PL$ /notfound [PT] > >+ # Block direct access to value_builder scripts >+ RewriteRule ^/cgi-bin/koha/cataloguing/value_builder/ /cgi-bin/koha/errors/403.pl [L,PT] >+ > RewriteRule ^/bib/([^\/]*)/?$ /cgi-bin/koha/catalogue/detail.pl?biblionumber=$1 [PT] > RewriteRule ^/isbn/([^\/]*)/?$ /search?q=isbn:$1 [PT] > RewriteRule ^/issn/([^\/]*)/?$ /search?q=issn:$1 [PT] >-- >2.39.5
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 40993
:
187723
|
188185
|
188186
|
188187
|
190284
|
190285
|
191367
|
191368