See https://github.com/glpi-project/glpi/issues/133
I definitively believe this is not a security issue in GLPI, but only a possible issue when the server is not correctly configured for GLPI. In https://github.com/glpi-project/glpi/commit/b1c31d10228131fd5072ac3f598180404c2bd760 I add a (partial) check to report this misconfiguration during the installation process. Not perfect, but should work in common case. Of course, this message this "very" probably raise question from unqualified sysadmin... :( This is not a blocker, installation can be forced. Remi. P.S. and RPM are not affected, and can't be, as by FHS, "files" is not in the webserver documents tree ;) _______________________________________________ Glpi-dev mailing list Glpi-dev@gna.org https://mail.gna.org/listinfo/glpi-dev
