Skip to content

Security hardening: disable expose_php, raise max_input_time, remove Indexes - #1269

Open
lucifer4330k wants to merge 2 commits into
openml:developfrom
lucifer4330k:hardening/max-input-exposephp-indexes
Open

Security hardening: disable expose_php, raise max_input_time, remove Indexes#1269
lucifer4330k wants to merge 2 commits into
openml:developfrom
lucifer4330k:hardening/max-input-exposephp-indexes

Conversation

@lucifer4330k

@lucifer4330k lucifer4330k commented Nov 17, 2025

Copy link
Copy Markdown

Implements server hardening from #1268:

  • docker/config/php.ini: set expose_php = Off
  • docker/config/php.ini: set max_input_time = 3600 to support large multipart parsing
  • docker/config/api.conf: remove Indexes from <Directory /var/www/openml> Options

Rationale:

  • Reduce information disclosure (hide PHP version)
  • Prevent directory listing
  • Avoid timeouts while reading multi-GB uploads given increased upload limits

This is a low-risk change that improves defaults for production deployments.

Fixes #1268

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

1 participant