.module and .install files are protected from direct access. The .test files don't contain many sensitive secrets, but it should be common practice to hide all PHP code (and in fact all files that don't need to be downloaded directly). Right now, it is possible to view any .test file in the browser.

CommentFileSizeAuthor
#1 restrict_test_files.patch685 bytesboombatower

Comments

boombatower’s picture

boombatower commented
Assigned: Unassigned » boombatower
Status: Active » Needs review
StatusFileSize
new restrict_test_files.patch685 bytes

I'm not sure if this is all that is needed, but I believe so.

boombatower’s picture

boombatower commented
Status: Needs review » Reviewed & tested by the community

Tested and seems to do the trick.

dries’s picture

dries commented
Status: Reviewed & tested by the community » Fixed

Committed to CVS HEAD. Thanks.

Anonymous’s picture

Anonymous (not verified) commented
Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.