Update access rules to block all root '.' files

2017-09-22 09:27:43 -04:00 · 2017-09-22 09:27:43 -04:00 · f54a812ad5
parent e3e3b4da58
commit f54a812ad5
1 changed files with 2 additions and 2 deletions
--- a/advanced/lighttpd.conf.debian
+++ b/advanced/lighttpd.conf.debian
@ -66,8 +66,8 @@ $HTTP["url"] =~ "^/admin/" {
    }
 }

-# Block the github files from being accessible.
-$HTTP["url"] =~ "^/admin/(.git|.gitignore|.github)" {
+# Block . files from being served, such as .git, .github, .gitignore
+$HTTP["url"] =~ "^/admin/\.(.*)" {
     url.access-deny = ("")
 }