FM / typo7

/var/softaculous/typo7

Name	Size	Mode	Actions
images/	-	0755	rm
php53/	-	0755	rm
php56/	-	0755	rm
php71/	-	0755	rm
php81/	-	0755	rm
php82/	-	0755	rm
.htaccess	312	0644	edit dl rm
clone.php	5741	0644	edit dl rm
edit.php	6937	0644	edit dl rm
edit.xml	433	0644	edit dl rm
fileadmin.htaccess	1938	0644	edit dl rm
fileindex.php	100	0644	edit dl rm
file_.htaccess	348	0644	edit dl rm
file_index.html	116	0644	edit dl rm
import.php	5912	0644	edit dl rm
info.xml	3848	0644	edit dl rm
install.js	924	0644	edit dl rm
install.php	19573	0644	edit dl rm
install.xml	733	0644	edit dl rm
md5	6109	0644	edit dl rm
notes.txt	1678	0644	edit dl rm
Pbkdf2Salt.php	781	0644	edit dl rm
settings.php	3691	0644	edit dl rm
update_pass.php	767	0644	edit dl rm
_.htaccess	15007	0644	edit dl rm
_upgrade.php	4174	0644	edit dl rm
_upgrade.xml	452	0644	edit dl rm

Edit: /var/softaculous/typo7/fileadmin.htaccess (1938B)

# This file applies Content-Security-Policy (CSP) HTTP headers
# to directories containing (user uploaded) resources like
# /fileadmin/ or /uploads/

<IfModule mod_headers.c>
    # matching requested *.pdf files only (strict rules block Safari showing PDF documents)
    <FilesMatch "\.pdf$">
        Header set Content-Security-Policy "default-src 'self' 'unsafe-inline'; script-src 'none'; object-src 'self'; plugin-types application/pdf;"
    </FilesMatch>
    # matching requested *.svg files only (allows using inline styles when serving SVG files)
    <FilesMatch "\.svg">
        Header set Content-Security-Policy "default-src 'self'; script-src 'none'; style-src 'unsafe-inline'; object-src 'none'; sandbox;"
    </FilesMatch>
    # matching anything else, using negative lookbehind pattern
    <FilesMatch "(?<!\.(?:pdf|svg))$">
        Header set Content-Security-Policy "default-src 'self'; script-src 'none'; style-src 'none'; object-src 'none'; sandbox;"
    </FilesMatch>

# =================================================================
    # Variations to send CSP header only when it has not be set before.
    # Adjust all `Header set` instructions above
    #     Header set Content-Security-Policy "<directives>"
    # with substitutes shown below
    #
    # -----------------------------------------------------------------
    # a) for Apache 2.4 (having `setifempty`)
    # -----------------------------------------------------------------
    #     Header setifempty Content-Security-Policy "<directives>"
    #
    # -----------------------------------------------------------------
    # b) for Apache 2.2 (using fallbacks)
    # -----------------------------------------------------------------
    #     Header append Content-Security-Policy ""
    #     Header edit Content-Security-Policy "^$" "<directives>"
    #
    # =================================================================
</IfModule>

# This file applies Content-Security-Policy (CSP) HTTP headers # to directories containing (user uploaded) resources like # /fileadmin/ or /uploads/ # matching requested *.pdf files only (strict rules block Safari showing PDF documents) Header set Content-Security-Policy "default-src 'self' 'unsafe-inline'; script-src 'none'; object-src 'self'; plugin-types application/pdf;" # matching requested *.svg files only (allows using inline styles when serving SVG files) Header set Content-Security-Policy "default-src 'self'; script-src 'none'; style-src 'unsafe-inline'; object-src 'none'; sandbox;" # matching anything else, using negative lookbehind pattern Header set Content-Security-Policy "default-src 'self'; script-src 'none'; style-src 'none'; object-src 'none'; sandbox;" # ================================================================= # Variations to send CSP header only when it has not be set before. # Adjust all `Header set` instructions above # Header set Content-Security-Policy "" # with substitutes shown below # # ----------------------------------------------------------------- # a) for Apache 2.4 (having `setifempty`) # ----------------------------------------------------------------- # Header setifempty Content-Security-Policy "" # # ----------------------------------------------------------------- # b) for Apache 2.2 (using fallbacks) # ----------------------------------------------------------------- # Header append Content-Security-Policy "" # Header edit Content-Security-Policy "^$" "" # # =================================================================