improved lockout of version control directories from browsing

11 years ago · c50f491c3d
1 changed files with 4 additions and 1 deletions
--- a/.htaccess
+++ b/.htaccess
@ -2,13 +2,16 @@
 Options -Indexes
 AddType application/x-java-archive .jar

-<FilesMatch "\.(out|log|git)$">
+<FilesMatch "\.(out|log)$">
 Deny from all
 </FilesMatch>

 <IfModule mod_rewrite.c>
  RewriteEngine on

+  # Protect dot directories from browsing, e.g. ".git"
+  RewriteRule "(^|/)\." - [F]
+
  # Rewrite current-style URLs of the form 'index.php?q=x'.
  RewriteCond %{REQUEST_FILENAME} !-f
  RewriteCond %{REQUEST_FILENAME} !-d