The URL-path name must be set to the file path name or the directory path name.
An XCCDF Rule
Description
The ScriptAlias directive controls which directories the Apache server "sees" as containing scripts. If the directive uses a URL-path name that is different than the actual file system path, the potential exists to expose the script source code.
| Property | Value |
|---|---|
| Responsibility | Web Administrator |
- ID
- SV-33185r1_rule
- Version
- WA00560 W22
- Severity
- Medium
- Updated
Remediation Templates
A Manual Procedure
Modify the ScriptAlias directive so the URL-path and file-path/directory-path entries match.