Hey all,
I deployed the XG as a home user, and I use it for Web Server Protection for several domains. One of those domains contain random files and images, which I intend to share with various people. To keep the exact content private, I created folders:
i.domain.nl/a/
i.domain.nl/b/
and i.domain.nl/c/
(I replaced the actual domain here)
i.domain.nl is a virtual host on one of my webservers, nothing special is configured here.
Then I created 3 users,
User A can allow folder A
User B can allow folder B
And the same for user C.
In the WAF I chose for Path-specific routing. Then per folder I turned on authentication.
Now, as soon as you open the page, it will show a prompt for username / password.
Whenever I click "Cancel" 3 times, a nice index of the actual folder shows up, which is completely browsable.
How can I protect this properly?
This thread was automatically locked due to age.
