Skip to content

Commit 7f418de

Browse files
author
Daniel Neto
committed
fix: Add rewrite rule to deny access to hidden files except for well-known directories
https://github.com/WWBN/AVideo/security/advisories/GHSA-wf69-r4mx-43rr
1 parent 1a1df6a commit 7f418de

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

.htaccess

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -122,6 +122,7 @@ Options All -Indexes
122122
RewriteRule ^(.*)$ - [env=proto:http]
123123

124124
RewriteEngine on
125+
RewriteRule "(^|/)\.(?!well-known(?:/|$))" - [F,L,NC]
125126
#VideoHLS for DRM
126127

127128
RewriteRule ^api/([^/]+)/([^/]+)$ plugin/API/router.php?APIPlugin=$1&APIName=$2 [QSA,L]

0 commit comments

Comments
 (0)