summaryrefslogtreecommitdiff
path: root/.htaccess
diff options
context:
space:
mode:
authoralecpl <alec@alec.pl>2011-07-02 08:20:15 +0000
committeralecpl <alec@alec.pl>2011-07-02 08:20:15 +0000
commit4b1d5d6e384fc5bddff8ee1c7cb35b8ea9c84bf3 (patch)
tree9b1755aa5f2529d58cfd37a826bfd81c83d87d53 /.htaccess
parent02e079f9170539a639a9f42248829faeb7c17ae3 (diff)
Improve .htaccess rules to make it less easy to fingerprint roundcube version
by denying access to files and stoping directory indexes (#1484066)
Diffstat (limited to '.htaccess')
-rw-r--r--.htaccess6
1 files changed, 4 insertions, 2 deletions
diff --git a/.htaccess b/.htaccess
index 704779e2e..2bc9f95ea 100644
--- a/.htaccess
+++ b/.htaccess
@@ -29,6 +29,9 @@ php_value mbstring.func_overload 0
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule ^favicon.ico$ skins/default/images/favicon.ico
+# security rules
+RewriteRule .svn/ - [F]
+RewriteRule ^README|INSTALL|LICENSE|SQL|bin|CHANGELOG$ - [F]
</IfModule>
<IfModule mod_deflate.c>
@@ -46,5 +49,4 @@ ExpiresDefault "access plus 1 month"
</IfModule>
FileETag MTime Size
-
-
+Options -Indexes