aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFriendika <info@friendika.com>2010-11-09 14:10:33 -0800
committerFriendika <info@friendika.com>2010-11-09 14:10:33 -0800
commitc50f491c3dd6df917c86d8074ebfdba22f96558d (patch)
treead53628658a63d1a19fbbb39577b2f66ef7ce135
parentb4c7b6a77a83f88277fd4bd95fd00defe61f2e64 (diff)
downloadvolse-hubzilla-c50f491c3dd6df917c86d8074ebfdba22f96558d.tar.gz
volse-hubzilla-c50f491c3dd6df917c86d8074ebfdba22f96558d.tar.bz2
volse-hubzilla-c50f491c3dd6df917c86d8074ebfdba22f96558d.zip
improved lockout of version control directories from browsing
-rw-r--r--.htaccess5
1 files changed, 4 insertions, 1 deletions
diff --git a/.htaccess b/.htaccess
index 75b3e7a81..65578e235 100644
--- a/.htaccess
+++ b/.htaccess
@@ -2,13 +2,16 @@
Options -Indexes
AddType application/x-java-archive .jar
-<FilesMatch "\.(out|log|git)$">
+<FilesMatch "\.(out|log)$">
Deny from all
</FilesMatch>
<IfModule mod_rewrite.c>
RewriteEngine on
+ # Protect dot directories from browsing, e.g. ".git"
+ RewriteRule "(^|/)\." - [F]
+
# Rewrite current-style URLs of the form 'index.php?q=x'.
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d