Skip to content

Block access to various project files #2359

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Aug 10, 2022
Merged

Block access to various project files #2359

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
5b1a484
Block access to various project files
colinmollenhour Aug 3, 2022
3cc6cfc
Allow manifest.json
colinmollenhour Aug 8, 2022
cac4c85
Update .htaccess
colinmollenhour Aug 8, 2022
efca27f
Update .htaccess
colinmollenhour Aug 9, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 14 additions & 5 deletions .htaccess
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -201,12 +201,21 @@
Allow from all

###########################################
## Deny access to release notes to prevent disclosure of the installed Magento version
## Deny access to other project files to prevent disclosure of the installed Magento version or other information
## Only robots.txt and manifest.json should be allowed by default

<Files RELEASE_NOTES.txt>
order allow,deny
deny from all
</Files>
<FilesMatch (?<!robots)\.txt$>
Order allow,deny
Deny from all
</FilesMatch>
<FilesMatch (?<!manifest)\.json$>
Order allow,deny
Deny from all
</FilesMatch>
<FilesMatch \.(lock|md|sample|sh|yml|yaml)$>
Order allow,deny
Deny from all
</FilesMatch>

############################################
## If running in cluster environment, uncomment this
Expand Down