From 748e88c3e8ddb1972f6da5fc08de9bb7816b1fc9 Mon Sep 17 00:00:00 2001
From: Shannon Deminick <sdeminick@gmail.com>
Date: Sun, 12 May 2013 19:29:05 -1000
Subject: [PATCH] added web.config files to the root of xslt folders which will
 disable the ability for people to publicly download other's xslt files .

---
 src/Umbraco.Web.UI/Umbraco.Web.UI.csproj   |  4 +++-
 src/Umbraco.Web.UI/umbraco/xslt/Web.config | 18 ++++++++++++++++++
 src/Umbraco.Web.UI/xslt/Web.config         | 18 ++++++++++++++++++
 3 files changed, 39 insertions(+), 1 deletion(-)
 create mode 100644 src/Umbraco.Web.UI/umbraco/xslt/Web.config
 create mode 100644 src/Umbraco.Web.UI/xslt/Web.config

diff --git a/src/Umbraco.Web.UI/Umbraco.Web.UI.csproj b/src/Umbraco.Web.UI/Umbraco.Web.UI.csproj
index 68a4476536..decc6a9775 100644
--- a/src/Umbraco.Web.UI/Umbraco.Web.UI.csproj
+++ b/src/Umbraco.Web.UI/Umbraco.Web.UI.csproj
@@ -545,6 +545,9 @@
     </Compile>
     <Content Include="Config\Splashes\booting.aspx" />
     <Content Include="Config\Splashes\noNodes.aspx" />
+    <None Include="Xslt\Web.config">
+      <SubType>Designer</SubType>
+    </None>
     <None Include="Config\404handlers.Release.config">
       <DependentUpon>404handlers.config</DependentUpon>
     </None>
@@ -2526,7 +2529,6 @@
     <Folder Include="Umbraco_Client\FolderBrowser\Images\" />
     <Folder Include="Umbraco_Client\Tags\images\" />
     <Folder Include="UserControls\" />
-    <Folder Include="Xslt\" />
   </ItemGroup>
   <PropertyGroup>
     <VisualStudioVersion Condition="'$(VisualStudioVersion)' == ''">10.0</VisualStudioVersion>
diff --git a/src/Umbraco.Web.UI/umbraco/xslt/Web.config b/src/Umbraco.Web.UI/umbraco/xslt/Web.config
new file mode 100644
index 0000000000..fd6e3a816a
--- /dev/null
+++ b/src/Umbraco.Web.UI/umbraco/xslt/Web.config
@@ -0,0 +1,18 @@
+<?xml version="1.0"?>
+
+<!-- Blocks public downloading of anything in this folder and sub folders -->
+
+<configuration> 
+  <system.web>
+    <httpHandlers>
+      <add path="*" verb="*" type="System.Web.HttpNotFoundHandler"/>
+    </httpHandlers>
+  </system.web>
+  <system.webServer>
+    <validation validateIntegratedModeConfiguration="false" />
+    <handlers>
+      <remove name="BlockViewHandler"/>
+      <add name="BlockViewHandler" path="*" verb="*" preCondition="integratedMode" type="System.Web.HttpNotFoundHandler" />
+    </handlers>
+  </system.webServer>
+</configuration>
diff --git a/src/Umbraco.Web.UI/xslt/Web.config b/src/Umbraco.Web.UI/xslt/Web.config
new file mode 100644
index 0000000000..fd6e3a816a
--- /dev/null
+++ b/src/Umbraco.Web.UI/xslt/Web.config
@@ -0,0 +1,18 @@
+<?xml version="1.0"?>
+
+<!-- Blocks public downloading of anything in this folder and sub folders -->
+
+<configuration> 
+  <system.web>
+    <httpHandlers>
+      <add path="*" verb="*" type="System.Web.HttpNotFoundHandler"/>
+    </httpHandlers>
+  </system.web>
+  <system.webServer>
+    <validation validateIntegratedModeConfiguration="false" />
+    <handlers>
+      <remove name="BlockViewHandler"/>
+      <add name="BlockViewHandler" path="*" verb="*" preCondition="integratedMode" type="System.Web.HttpNotFoundHandler" />
+    </handlers>
+  </system.webServer>
+</configuration>