summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLukas Reschke <lukas@owncloud.com>2014-12-05 19:51:19 +0100
committerLukas Reschke <lukas@owncloud.com>2014-12-05 19:51:19 +0100
commit941a983d09c24c98d3fab4c06d3dc5449749221b (patch)
treedb38af5cfdfa3e215f0a05fc40453a033b36051e
parent89db2a027701503ea758380b20b10ca7f5a244d9 (diff)
parent1a6928f44787cccbaddb59e4d72e0ef131a40a39 (diff)
downloadnextcloud-server-941a983d09c24c98d3fab4c06d3dc5449749221b.tar.gz
nextcloud-server-941a983d09c24c98d3fab4c06d3dc5449749221b.zip
Merge pull request #12477 from rjaeckel/master
restrict access to public files only
-rw-r--r--.htaccess2
1 files changed, 2 insertions, 0 deletions
diff --git a/.htaccess b/.htaccess
index e45810d0a05..10adb902ff5 100644
--- a/.htaccess
+++ b/.htaccess
@@ -25,6 +25,8 @@ RewriteRule ^\.well-known/caldav /remote.php/caldav/ [R]
RewriteRule ^apps/calendar/caldav\.php remote.php/caldav/ [QSA,L]
RewriteRule ^apps/contacts/carddav\.php remote.php/carddav/ [QSA,L]
RewriteRule ^remote/(.*) remote.php [QSA,L]
+RewriteRule ^(build|tests|config|lib|3rdparty|templates)/.* - [R=404,L]
+RewriteRule ^(\.|autotest|occ|issue|indie|db_|console).* - [R=404,L]
</IfModule>
<IfModule mod_mime.c>
AddType image/svg+xml svg svgz