FM / typo8

/var/softaculous/typo8

Name	Size	Mode	Actions
images/	-	0755	rm
php53/	-	0755	rm
php56/	-	0755	rm
php71/	-	0755	rm
php81/	-	0755	rm
php82/	-	0755	rm
.htaccess	312	0644	edit dl rm
edit.php	6917	0644	edit dl rm
edit.xml	433	0644	edit dl rm
fileadmin.htaccess	1938	0644	edit dl rm
fileindex.php	100	0644	edit dl rm
file_.htaccess	348	0644	edit dl rm
file_index.html	116	0644	edit dl rm
import.php	5907	0644	edit dl rm
info.xml	3585	0644	edit dl rm
install.js	924	0644	edit dl rm
install.php	19496	0644	edit dl rm
install.xml	733	0644	edit dl rm
md5	5933	0644	edit dl rm
notes.txt	1987	0644	edit dl rm
Pbkdf2Salt.php	781	0644	edit dl rm
settings.php	3512	0644	edit dl rm
update_pass.php	767	0644	edit dl rm
_.htaccess	14339	0644	edit dl rm
_clone.php	3440	0644	edit dl rm
_upgrade.php	4174	0644	edit dl rm
_upgrade.xml	452	0644	edit dl rm

Edit: /var/softaculous/typo8/fileadmin.htaccess (1938B)

# This file applies Content-Security-Policy (CSP) HTTP headers
# to directories containing (user uploaded) resources like
# /fileadmin/ or /uploads/

<IfModule mod_headers.c>
    # matching requested *.pdf files only (strict rules block Safari showing PDF documents)
    <FilesMatch "\.pdf$">
        Header set Content-Security-Policy "default-src 'self' 'unsafe-inline'; script-src 'none'; object-src 'self'; plugin-types application/pdf;"
    </FilesMatch>
    # matching requested *.svg files only (allows using inline styles when serving SVG files)
    <FilesMatch "\.svg">
        Header set Content-Security-Policy "default-src 'self'; script-src 'none'; style-src 'unsafe-inline'; object-src 'none'; sandbox;"
    </FilesMatch>
    # matching anything else, using negative lookbehind pattern
    <FilesMatch "(?<!\.(?:pdf|svg))$">
        Header set Content-Security-Policy "default-src 'self'; script-src 'none'; style-src 'none'; object-src 'none'; sandbox;"
    </FilesMatch>

# =================================================================
    # Variations to send CSP header only when it has not be set before.
    # Adjust all `Header set` instructions above
    #     Header set Content-Security-Policy "<directives>"
    # with substitutes shown below
    #
    # -----------------------------------------------------------------
    # a) for Apache 2.4 (having `setifempty`)
    # -----------------------------------------------------------------
    #     Header setifempty Content-Security-Policy "<directives>"
    #
    # -----------------------------------------------------------------
    # b) for Apache 2.2 (using fallbacks)
    # -----------------------------------------------------------------
    #     Header append Content-Security-Policy ""
    #     Header edit Content-Security-Policy "^$" "<directives>"
    #
    # =================================================================
</IfModule>

# This file applies Content-Security-Policy (CSP) HTTP headers # to directories containing (user uploaded) resources like # /fileadmin/ or /uploads/ # matching requested *.pdf files only (strict rules block Safari showing PDF documents) Header set Content-Security-Policy "default-src 'self' 'unsafe-inline'; script-src 'none'; object-src 'self'; plugin-types application/pdf;" # matching requested *.svg files only (allows using inline styles when serving SVG files) Header set Content-Security-Policy "default-src 'self'; script-src 'none'; style-src 'unsafe-inline'; object-src 'none'; sandbox;" # matching anything else, using negative lookbehind pattern Header set Content-Security-Policy "default-src 'self'; script-src 'none'; style-src 'none'; object-src 'none'; sandbox;" # ================================================================= # Variations to send CSP header only when it has not be set before. # Adjust all `Header set` instructions above # Header set Content-Security-Policy "" # with substitutes shown below # # ----------------------------------------------------------------- # a) for Apache 2.4 (having `setifempty`) # ----------------------------------------------------------------- # Header setifempty Content-Security-Policy "" # # ----------------------------------------------------------------- # b) for Apache 2.2 (using fallbacks) # ----------------------------------------------------------------- # Header append Content-Security-Policy "" # Header edit Content-Security-Policy "^$" "" # # =================================================================