Improve .htaccess rules to make it less easy to fingerprint roundcube versi...

alecpl

2011-07-02 4b1d5d6e384fc5bddff8ee1c7cb35b8ea9c84bf3

Improve .htaccess rules to make it less easy to fingerprint roundcube version
by denying access to files and stoping directory indexes (#1484066)

 .htaccess

@@ -29,6 +29,9 @@
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule ^favicon.ico$ skins/default/images/favicon.ico
# security rules
RewriteRule .svn/ - [F]
RewriteRule ^README|INSTALL|LICENSE|SQL|bin|CHANGELOG$ - [F]
</IfModule>

<IfModule mod_deflate.c>
@@ -46,5 +49,4 @@
</IfModule>

FileETag MTime Size


Options -Indexes

 program/.htaccess

New file
@@ -0,0 +1,4 @@
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule !^js|.*\.gif$ - [F]
</IfModule>