Package: mediawiki
Version: 1:1.39.5-1~deb12u1

Hi,

Mediawiki ships with .htaccess files which contain outdated access
control directives.

for instance, /usr/share/mediawiki/vendor/.htaccess contains:

  Deny from all

rather than the more current

  Require all denied


The new syntax was introduced in Apache 2.4, shipping since at least
Jessie, April 2015.

Wouldn't it be time to go with the new syntax, as less and less people
now continue to use the access_compat module?

Thanks,

Alain

Reply via email to