prevent hotlink to js and css
-
Hi i have a site and recently run a ethical hacking excerscise and in the vulnerabilities has 2 mayor and i think you can help me with both
1 is the HTML form without CSRF protection (1)
2 is Vulnerable Javascript library (2)so i read the best practices to make a strong htaccess file
and this make half of the job
RewriteRule ^(.*)\.(|css|js)$ /public/$1.$2 [L,NC]
but when i enable this my site dont load any of this files i want to prevent only to enter directly to the js and css files but when my page loads graphically it looks ugly because this files never load.and for the csrf protection i read your plugin do the job to prevent this
i want to know how can enable this feature
or can you give me technical details how to work the csrf protection in the plugin?because i need to give a valid argument if i dont put nonce what we do to prevent this
thank you
- The topic ‘prevent hotlink to js and css’ is closed to new replies.
