bisco/azionelab-v2
1
0
Fork 0
generated from bisco/codex-bootstrap
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: harden WordPress against WPScan findings

Browse Source
This commit is contained in:
bisco
2026-07-23 19:10:11 +02:00
parent 0762b98fc6
commit 472b8616b4
10 changed files with 74 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/functional/tests/portal.spec.ts
+5
View File
@@ -121,6 +121,11 @@ test("protects the edge and exposes the WordPress admin", async ({ page, request
expect((await request.get("/xmlrpc.php")).status()).toBe(403);
expect((await request.get("/.env")).status()).toBe(404);
expect((await request.get("/wp-config.php")).status()).toBe(404);
expect((await request.get("/readme.html")).status()).toBe(404);
expect((await request.get("/license.txt")).status()).toBe(404);
expect((await request.get("/wp-admin/install.php")).status()).toBe(404);
expect((await request.get("/wp-content/mu-plugins/")).status()).toBe(404);
expect((await request.get("/wp-cron.php")).status()).toBe(403);
expect((await request.get("/wp-content/uploads/probe.php")).status()).toBe(403);
expect((await request.get("/wp-json/wp/v2/users")).status()).toBe(404);
expect((await request.get("/?post_type=azl_show&name=le-cose-che-restano")).status()).toBe(404);