Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/roundcube/roundcubemail.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAleksander Machniak <alec@alec.pl>2015-12-22 15:21:22 +0300
committerAleksander Machniak <alec@alec.pl>2015-12-22 15:21:22 +0300
commit1c2aad89ab86b519b0ca7f0cb560b917b2ca595a (patch)
treec1a8574f01c559daa118e764df93b52c6b5edcde /.htaccess
parentd08dc5bfc5cfa0d6dc98d47b86c3d6d071259fd0 (diff)
Fix .htaccess rewrite rules to not block .well-known URIs (#1490615)
Diffstat (limited to '.htaccess')
-rw-r--r--.htaccess2
1 files changed, 1 insertions, 1 deletions
diff --git a/.htaccess b/.htaccess
index 089e0147d..59e5dcae6 100644
--- a/.htaccess
+++ b/.htaccess
@@ -32,7 +32,7 @@ RewriteRule ^favicon\.ico$ skins/larry/images/favicon.ico
# security rules:
# - deny access to files not containing a dot or starting with a dot
# in all locations except installer directory
-RewriteRule ^(?!installer|[a-zA-Z0-9]{16})(\.?[^\.]+)$ - [F]
+RewriteRule ^(?!installer|\.well-known\/|[a-zA-Z0-9]{16})(\.?[^\.]+)$ - [F]
# - deny access to some locations
RewriteRule ^/?(\.git|\.tx|SQL|bin|config|logs|temp|tests|program\/(include|lib|localization|steps)) - [F]
# - deny access to some documentation files