[phoenix-ws] All source code and data in extensions folder is publicly available

Impact

All of the source code, files, and folders in phoenix_files/extensions/ are available to end users through a simple HTTP GET request.

Patches

The issue has been patched. The users of version 1.0.6 and above are not effected.

References

• https://github.com/Froggo8311/Phoenix/security/advisories/GHSA-c8f7-x2g7-7fxj
• https://github.com/advisories/GHSA-c8f7-x2g7-7fxj