From 18e68a223dffc3d8dec6bb3e7ac485a6338baacd Mon Sep 17 00:00:00 2001
From: Colin Mollenhour <colin@mollenhour.com>
Date: Wed, 3 Aug 2022 09:41:36 -0700
Subject: [PATCH] Blocked access to all dot files (#2349)

---
 .htaccess | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.htaccess b/.htaccess
index 585273a3a4b..fbf3c6a99a4 100644
--- a/.htaccess
+++ b/.htaccess
@@ -99,6 +99,12 @@
 
     #RewriteBase /magento/
 
+############################################
+## Prevent serving "hidden" files like git repository
+
+    RewriteCond %{REQUEST_URI} /\.
+    RewriteRule ^(.*)$ / [R=404,L]
+
 ############################################
 ## uncomment next line to enable light API calls processing