Gecko [ cel-fi.com.my ]

Name	Size	Permission	Date
images	[ DIR ]	drwxr-xr-x	2026-05-07 12:18
php53	[ DIR ]	drwxr-xr-x	2026-05-07 12:18
php56	[ DIR ]	drwxr-xr-x	2026-05-07 12:18
php71	[ DIR ]	drwxr-xr-x	2026-05-07 12:18
php81	[ DIR ]	drwxr-xr-x	2026-05-07 12:18
php82	[ DIR ]	drwxr-xr-x	2026-05-07 12:18
.htaccess	312 B	-rw-r--r--	2023-07-26 21:42
Pbkdf2Salt.php	781 B	-rw-r--r--	2021-12-22 22:54
_.htaccess	14.66 KB	-rw-r--r--	2026-05-06 18:49
_upgrade.php	4.08 KB	-rw-r--r--	2021-12-22 22:54
_upgrade.xml	452 B	-rw-r--r--	2023-07-26 21:42
clone.php	5.63 KB	-rw-r--r--	2026-05-06 18:53
edit.php	6.74 KB	-rw-r--r--	2026-05-06 18:53
edit.xml	433 B	-rw-r--r--	2021-12-22 22:54
file_.htaccess	348 B	-rw-r--r--	2024-10-21 19:11
file_index.html	116 B	-rw-r--r--	2024-10-21 19:11
fileadmin.htaccess	1.89 KB	-rw-r--r--	2025-12-02 22:02
fileindex.php	100 B	-rw-r--r--	2024-12-10 20:20
import.php	5.77 KB	-rw-r--r--	2026-05-06 18:53
info.xml	3.76 KB	-rw-r--r--	2026-05-06 18:49
install.js	924 B	-rw-r--r--	2021-12-22 22:54
install.php	19.09 KB	-rw-r--r--	2026-05-06 18:53
install.xml	733 B	-rw-r--r--	2023-07-26 21:42
md5	1.39 KB	-rw-r--r--	2026-05-06 18:53
notes.txt	1.67 KB	-rw-r--r--	2026-05-06 18:49
settings.php	3.43 KB	-rw-r--r--	2026-05-06 18:49
update_pass.php	767 B	-rw-r--r--	2023-07-26 21:42

Rename

# This file applies Content-Security-Policy (CSP) HTTP headers
# to directories containing (user uploaded) resources like
# /fileadmin/ or /uploads/

<IfModule mod_headers.c>
    # matching requested *.pdf files only (strict rules block Safari showing PDF documents)
    <FilesMatch "\.pdf$">
        Header set Content-Security-Policy "default-src 'self' 'unsafe-inline'; script-src 'none'; object-src 'self'; plugin-types application/pdf;"
    </FilesMatch>
    # matching requested *.svg files only (allows using inline styles when serving SVG files)
    <FilesMatch "\.svg">
        Header set Content-Security-Policy "default-src 'self'; script-src 'none'; style-src 'unsafe-inline'; object-src 'none'; sandbox;"
    </FilesMatch>
    # matching anything else, using negative lookbehind pattern
    <FilesMatch "(?<!\.(?:pdf|svg))$">
        Header set Content-Security-Policy "default-src 'self'; script-src 'none'; style-src 'none'; object-src 'none'; sandbox;"
    </FilesMatch>

# =================================================================
    # Variations to send CSP header only when it has not be set before.
    # Adjust all `Header set` instructions above
    #     Header set Content-Security-Policy "<directives>"
    # with substitutes shown below
    #
    # -----------------------------------------------------------------
    # a) for Apache 2.4 (having `setifempty`)
    # -----------------------------------------------------------------
    #     Header setifempty Content-Security-Policy "<directives>"
    #
    # -----------------------------------------------------------------
    # b) for Apache 2.2 (using fallbacks)
    # -----------------------------------------------------------------
    #     Header append Content-Security-Policy ""
    #     Header edit Content-Security-Policy "^$" "<directives>"
    #
    # =================================================================
</IfModule>