From 758f48b8524456d91b950d523a808e802aa9f29b Mon Sep 17 00:00:00 2001
From: Soner Sayakci <s.sayakci@shopware.com>
Date: Fri, 16 Apr 2021 08:39:40 +0000
Subject: [PATCH] NEXT-14825 - Fix htaccess matches api requests

---
 .htaccess        |  3 ---
 bin/.htaccess    | 11 +++++++++++
 config/.htaccess | 11 +++++++++++
 files/.htaccess  | 11 +++++++++++
 src/.htaccess    | 11 +++++++++++
 var/.htaccess    | 11 +++++++++++
 vendor/.htaccess | 11 +++++++++++
 7 files changed, 66 insertions(+), 3 deletions(-)
 create mode 100644 bin/.htaccess
 create mode 100644 config/.htaccess
 create mode 100644 files/.htaccess
 create mode 100644 src/.htaccess
 create mode 100644 var/.htaccess
 create mode 100644 vendor/.htaccess

diff --git a/.htaccess b/.htaccess
index dd9abcb22e..0635b2c3f2 100644
--- a/.htaccess
+++ b/.htaccess
@@ -10,8 +10,5 @@ DirectoryIndex index.html
 
     # Restrict access to root folder files
     RedirectMatch 404 /(composer\.(json|lock|phar)|README\.md|\.gitignore|.*\.dist|\.env.*)$
-
-    # Restrict access to shop configs files
-    RedirectMatch 404 ^.*\/(bin|config|build|custom|files|src|var|vendor)\/(?<!public).*$
 </IfModule>
 
diff --git a/bin/.htaccess b/bin/.htaccess
new file mode 100644
index 0000000000..09dfa0c98c
--- /dev/null
+++ b/bin/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>
diff --git a/config/.htaccess b/config/.htaccess
new file mode 100644
index 0000000000..09dfa0c98c
--- /dev/null
+++ b/config/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>
diff --git a/files/.htaccess b/files/.htaccess
new file mode 100644
index 0000000000..09dfa0c98c
--- /dev/null
+++ b/files/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>
diff --git a/src/.htaccess b/src/.htaccess
new file mode 100644
index 0000000000..09dfa0c98c
--- /dev/null
+++ b/src/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>
diff --git a/var/.htaccess b/var/.htaccess
new file mode 100644
index 0000000000..09dfa0c98c
--- /dev/null
+++ b/var/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>
diff --git a/vendor/.htaccess b/vendor/.htaccess
new file mode 100644
index 0000000000..09dfa0c98c
--- /dev/null
+++ b/vendor/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ ".*">
+    # Deny all requests from Apache 2.4+.
+    <IfModule mod_authz_core.c>
+          Require all denied
+    </IfModule>
+
+    # Deny all requests from Apache 2.0-2.2.
+    <IfModule !mod_authz_core.c>
+        Deny from all
+    </IfModule>
+</Files>