From c50f491c3dd6df917c86d8074ebfdba22f96558d Mon Sep 17 00:00:00 2001
From: Friendika <info@friendika.com>
Date: Tue, 9 Nov 2010 14:10:33 -0800
Subject: [PATCH] improved lockout of version control directories from browsing

---
 .htaccess | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.htaccess b/.htaccess
index 75b3e7a81..65578e235 100644
--- a/.htaccess
+++ b/.htaccess
@@ -2,13 +2,16 @@
 Options -Indexes
 AddType application/x-java-archive .jar
 
-<FilesMatch "\.(out|log|git)$">
+<FilesMatch "\.(out|log)$">
 Deny from all
 </FilesMatch>
 
 <IfModule mod_rewrite.c>
   RewriteEngine on
 
+  # Protect dot directories from browsing, e.g. ".git"
+  RewriteRule "(^|/)\." - [F]
+
   # Rewrite current-style URLs of the form 'index.php?q=x'.
   RewriteCond %{REQUEST_FILENAME} !-f
   RewriteCond %{REQUEST_FILENAME} !-d