protect symfony resource files

This commit is contained in:
Mike Macgirvin 2024-05-13 07:08:35 +10:00
parent 2118b2aeaf
commit d57f9a3630
2 changed files with 2 additions and 1 deletions

1
.gitignore vendored
View file

@ -22,6 +22,7 @@ Thumbs.db
__pycache__ __pycache__
## Ignore site specific files and folders ## Ignore site specific files and folders
.env*
.htaccess .htaccess
.htconfig.php .htconfig.php
.htstartup.php .htstartup.php

View file

@ -3,7 +3,7 @@ AddType audio/ogg .oga
CGIPassAuth On CGIPassAuth On
# don't allow any web access to logfiles, even after rotation/compression # don't allow any web access to logfiles, even after rotation/compression
<FilesMatch "\.(out|log|gz)$"> <FilesMatch "\.(out|log|gz|env)$">
<IfModule mod_authz_core.c> <IfModule mod_authz_core.c>
Require all denied Require all denied
</IfModule> </IfModule>