Drupal 7.x civicrm 4.4 Security Warning

Problem1. ||The CiviCRM debug log should not be downloadable.Read more about this warning||
Problem2. ||The upload & custom directory file should not be downloadable ||   if set permission to 755 also like that if move out webroot then it display ""Notice：Undefined offset: 1 at CRM_Utils_Check_Security->guessUrl() (/var/www/html/sites/all/modules/civicrm/CRM/Utils/Check/Security.php in line 290)。""