[TASK] Move vendor/ directory out of typo3/ 95/42495/3
authorHelmut Hummel <helmut.hummel@typo3.org>
Tue, 11 Aug 2015 00:15:42 +0000 (02:15 +0200)
committerBenni Mack <benni@typo3.org>
Tue, 11 Aug 2015 15:02:18 +0000 (17:02 +0200)
commit554653e5055630f3c742f8242f43b717ab6f368e
tree554e3e9c80cb10c1d48c3c46544976405fa903f7
parenta1b8a91345f2707033fb8355f1387bfc2520a64f
[TASK] Move vendor/ directory out of typo3/

The typo3/ directory must currently be exposed in the web root for TYPO3 to work properly.
Having the vendor dir with all composer dependencies in typo3/vendor however means, that
these will also be exposed. This can be a security risk, which can be avoided by simply
moving the vendor directory one level up.

By doing so, a web directory which contains only two symlinks (typo3 and index.php) and no
sources or link to the sources, will be protected from this risk.

Resolves: #68918
Releases: master
Change-Id: I5e504520102f94c81897945b41043d930cfc5b5f
Reviewed-on: http://review.typo3.org/42495
Reviewed-by: Mathias Brodala <mbrodala@pagemachine.de>
Tested-by: Mathias Brodala <mbrodala@pagemachine.de>
Reviewed-by: Stefan Neufeind <typo3.neufeind@speedpartner.de>
Tested-by: Benni Mack <benni@typo3.org>
Reviewed-by: Benni Mack <benni@typo3.org>
31 files changed:
.gitignore
.travis.yml
_.htaccess
composer.json
composer.lock
index.php
typo3/ajax.php
typo3/alt_clickmenu.php
typo3/alt_db_navframe.php
typo3/alt_doc.php
typo3/alt_file_navframe.php
typo3/browser.php
typo3/cli_dispatch.phpsh
typo3/db_new.php
typo3/dummy.php
typo3/index.php
typo3/init.php
typo3/login_frameset.php
typo3/logout.php
typo3/mod.php
typo3/move_el.php
typo3/show_item.php
typo3/sysext/core/Build/FunctionalTestsBootstrap.php
typo3/sysext/core/Build/UnitTestsBootstrap.php
typo3/sysext/core/Documentation/Changelog/7.2/Breaking-66001-ComposerVendorDirectoryChanged.rst
typo3/sysext/core/Tests/FunctionalTestCase.php
typo3/sysext/core/Tests/FunctionalTestCaseBootstrapUtility.php
typo3/sysext/install/Start/Install.php
typo3/tce_db.php
typo3/tce_file.php
typo3/thumbs.php