|
|
@@ -1,7 +1,7 @@
|
|
|
# Copy this file to `.htaccess` for additional root-level protection
|
|
|
# if you cannot set Apache `DocumentRoot` to `./p/` as recommended.
|
|
|
|
|
|
-# Deny files starting with a dot, or without extension, or not in a whitelist of extensions
|
|
|
-<FilesMatch "^\.|^[^.]+$|\.(?!css|gif|html|ico|js|php|png|svg|txt|woff|woff2)[^.]*$">
|
|
|
+# Deny files starting with a dot, or without extension (except some), or not in a whitelist of extensions
|
|
|
+<FilesMatch "^\.|^(?!oidc)[^.]+$|\.(?!css|gif|html|ico|js|php|png|svg|txt|woff|woff2)[^.]*$">
|
|
|
Require all denied
|
|
|
</FilesMatch>
|