fix: harden wordpress edge exposure

2026-06-25 22:57:43 +02:00
parent 02e05ec3b6
commit 82ae9eaae4
11 changed files with 91 additions and 7 deletions
@@ -101,6 +101,7 @@ test("protects the edge and exposes the WordPress admin", async ({ page, request
  expect((await request.get("/xmlrpc.php")).status()).toBe(403);
  expect((await request.get("/.env")).status()).toBe(404);
  expect((await request.get("/wp-config.php")).status()).toBe(404);
+  expect((await request.get("/wp-content/uploads/probe.php")).status()).toBe(403);
  expect((await request.get("/wp-json/wp/v2/users")).status()).toBe(404);

  await page.goto("/wp-admin/");