MAGETWO-95921: Revert from 2.2.7 fixes not delivered to 2.3.0

Author: zakdma

.htaccess

@@ -364,15 +364,6 @@
             Require all denied
         </IfVersion>
     </Files>
-    <Files .user.ini>
-        <IfVersion < 2.4>
-            order allow,deny
-            deny from all
-        </IfVersion>
-        <IfVersion >= 2.4>
-            Require all denied
-        </IfVersion>
-    </Files>
 
 # For 404s and 403s that aren't handled by the application, show plain 404 response
 ErrorDocument 404 /pub/errors/404.php

.htaccess.sample

@@ -341,15 +341,6 @@
             Require all denied
         </IfVersion>
     </Files>
-    <Files .user.ini>
-        <IfVersion < 2.4>
-            order allow,deny
-            deny from all
-        </IfVersion>
-        <IfVersion >= 2.4>
-            Require all denied
-        </IfVersion>
-    </Files>
 
 # For 404s and 403s that aren't handled by the application, show plain 404 response
 ErrorDocument 404 /pub/errors/404.php

app/code/Magento/AdminNotification/Block/Grid/Renderer/Actions.php

@@ -8,9 +8,6 @@
 
 namespace Magento\AdminNotification\Block\Grid\Renderer;
 
-/**
- * Renderer class for action in the admin notifications grid
- */
 class Actions extends \Magento\Backend\Block\Widget\Grid\Column\Renderer\AbstractRenderer
 {
     /**
@@ -40,8 +37,7 @@ public function __construct(
      */
     public function render(\Magento\Framework\DataObject $row)
     {
-        $readDetailsHtml = $row->getUrl() ? '<a class="action-details" target="_blank" href="' .
-            $this->escapeUrl($row->getUrl()) . '">' .
+        $readDetailsHtml = $row->getUrl() ? '<a class="action-details" target="_blank" href="' . $row->getUrl() . '">' .
             __('Read Details') . '</a>' : '';
 
         $markAsReadHtml = !$row->getIsRead() ? '<a class="action-mark" href="' . $this->getUrl(

app/code/Magento/Newsletter/view/adminhtml/templates/preview/iframeswitcher.phtml

@@ -16,14 +16,7 @@
         </div>
         <?php endif;?>
     </div>
-    <iframe
-            name="preview_iframe"
-            id="preview_iframe"
-            frameborder="0"
-            title="<?= $block->escapeHtmlAttr(__('Preview')) ?>"
-            width="100%"
-            sandbox="allow-forms allow-pointer-lock allow-scripts">
-    </iframe>
+    <iframe name="preview_iframe" id="preview_iframe" frameborder="0" title="<?= $block->escapeHtmlAttr(__('Preview')) ?>" width="100%"></iframe>
     <?= $block->getChildHtml('preview_form') ?>
 </div>
 

nginx.conf.sample

@@ -33,11 +33,6 @@ charset UTF-8;
 error_page 404 403 = /errors/404.php;
 #add_header "X-UA-Compatible" "IE=Edge";
 
-# Deny access to sensitive files
-location /.user.ini {
-    deny all;
-}
-
 # PHP entry point for setup application
 location ~* ^/setup($|/) {
     root $MAGE_ROOT;

pub/.htaccess

@@ -220,16 +220,6 @@ ErrorDocument 403 /errors/404.php
             Require all denied
         </IfVersion>
     </Files>
-## Deny access  to .user.ini##
-    <Files .user.ini>
-        <IfVersion < 2.4>
-            order allow,deny
-            deny from all
-        </IfVersion>
-        <IfVersion >= 2.4>
-            Require all denied
-        </IfVersion>
-    </Files>
 
 <IfModule mod_headers.c>
     ############################################