diff --git a/.htaccess b/.htaccess
index 585273a3a4b..2f07c92af44 100644
--- a/.htaccess
+++ b/.htaccess
@@ -201,12 +201,21 @@
     Allow from all
 
 ###########################################
-## Deny access to release notes to prevent disclosure of the installed Magento version
+## Deny access to other project files to prevent disclosure of the installed Magento version or other information
+## Only robots.txt and manifest.json should be allowed by default
 
-    <Files RELEASE_NOTES.txt>
-        order allow,deny
-        deny from all
-    </Files>
+    <FilesMatch (?<!robots)\.txt$>
+        Order allow,deny
+        Deny from all
+    </FilesMatch>
+    <FilesMatch (?<!manifest)\.json$>
+        Order allow,deny
+        Deny from all
+    </FilesMatch>
+    <FilesMatch \.(lock|md|sample|sh|yml|yaml)$>
+        Order allow,deny
+        Deny from all
+    </FilesMatch>
 
 ############################################
 ## If running in cluster environment, uncomment this