NEXT-14825 - Fix htaccess matches api requests

fibenacci · Apr 19, 2021 · 758f48b · 758f48b
1 parent 36e8e57
commit 758f48b
Show file tree

Hide file tree

Showing 7 changed files with 66 additions and 3 deletions.
diff --git a/.htaccess b/.htaccess
@@ -10,8 +10,5 @@ DirectoryIndex index.html
 
     # Restrict access to root folder files
     RedirectMatch 404 /(composer\.(json|lock|phar)|README\.md|\.gitignore|.*\.dist|\.env.*)$
-
-    # Restrict access to shop configs files
-    RedirectMatch 404 ^.*\/(bin|config|build|custom|files|src|var|vendor)\/(?<!public).*$
 </IfModule>
 
diff --git a/bin/.htaccess b/bin/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>
diff --git a/config/.htaccess b/config/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>
diff --git a/files/.htaccess b/files/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>
diff --git a/src/.htaccess b/src/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>
diff --git a/var/.htaccess b/var/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>
diff --git a/vendor/.htaccess b/vendor/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>