Răsfoiți Sursa

Apache allow OIDC (#6893)

fix https://github.com/FreshRSS/FreshRSS/issues/6890
Fix regression from https://github.com/FreshRSS/FreshRSS/pull/6881
Alexandre Alapetite 1 an în urmă
părinte
comite
a686429090
2 a modificat fișierele cu 4 adăugiri și 4 ștergeri
  1. 2 2
      .htaccess.dist
  2. 2 2
      p/.htaccess

+ 2 - 2
.htaccess.dist

@@ -1,7 +1,7 @@
 # Copy this file to `.htaccess` for additional root-level protection
 # if you cannot set Apache `DocumentRoot` to `./p/` as recommended.
 
-# Deny files starting with a dot, or without extension, or not in a whitelist of extensions
-<FilesMatch "^\.|^[^.]+$|\.(?!css|gif|html|ico|js|php|png|svg|txt|woff|woff2)[^.]*$">
+# Deny files starting with a dot, or without extension (except some), or not in a whitelist of extensions
+<FilesMatch "^\.|^(?!oidc)[^.]+$|\.(?!css|gif|html|ico|js|php|png|svg|txt|woff|woff2)[^.]*$">
 	Require all denied
 </FilesMatch>

+ 2 - 2
p/.htaccess

@@ -1,6 +1,6 @@
 <IfModule mod_authz_core.c>
-	# Deny files starting with a dot, or without extension, or not in a whitelist of extensions
-	<FilesMatch "^\.|^[^.]+$|\.(?!css|gif|html|ico|js|php|png|svg|txt|woff|woff2)[^.]*$">
+	# Deny files starting with a dot, or without extension (except some), or not in a whitelist of extensions
+	<FilesMatch "^\.|^(?!oidc)[^.]+$|\.(?!css|gif|html|ico|js|php|png|svg|txt|woff|woff2)[^.]*$">
 		Require all denied
 	</FilesMatch>
 </IfModule>