From 3f20981aab1ba1d48a9c14be1c0cbae924e80dff Mon Sep 17 00:00:00 2001 From: Celly Date: Fri, 22 Sep 2017 09:29:00 -0400 Subject: [PATCH] Update access rules to block all root '.' files --- advanced/lighttpd.conf.fedora | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/advanced/lighttpd.conf.fedora b/advanced/lighttpd.conf.fedora index 27a854af..7b2449c6 100644 --- a/advanced/lighttpd.conf.fedora +++ b/advanced/lighttpd.conf.fedora @@ -85,8 +85,8 @@ $HTTP["url"] =~ "^/admin/" { } } -# Block the github files from being accessible. -$HTTP["url"] =~ "^/admin/(.git|.gitignore|.github)" { +# Block . files from being served, such as .git, .github, .gitignore +$HTTP["url"] =~ "^/admin/\.(.*)" { url.access-deny = ("") }