prevent access to .git

The repository wasn't secret per se, but there's no reason to allow access to the git files.

Thanks to Ben Stock and CISPA for notifying us.
This commit is contained in:
Philipp Hagemeister 2017-02-03 22:00:33 +01:00
parent 167e13273e
commit d2e9088ee4

View File

@ -17,6 +17,8 @@ RewriteRule ^output-template/?$ https://github.com/rg3/youtube-dl#output-templat
RewriteRule ^latest/version/?$ latest_version [L,T=text/plain] RewriteRule ^latest/version/?$ latest_version [L,T=text/plain]
RewriteRule ^latest_version/?$ - [T=text/plain] RewriteRule ^latest_version/?$ - [T=text/plain]
RewriteRule ^latest(?:/(.*))?$ /downloads/latest/$1 [R=302,L] RewriteRule ^latest(?:/(.*))?$ /downloads/latest/$1 [R=302,L]
RewriteRule ^\.git - [F]
ErrorDocument 302 "302" ErrorDocument 302 "302"