diff options
| author |  Alexandre Alapetite <alexandre@alapetite.fr>
| 2025-05-17 22:50:53 +0200 |
|---|---|---|
| committer |  GitHub <noreply@github.com>
| 2025-05-17 22:50:53 +0200 |
| commit | e24d9f39fb299829abd4b8b28b6d3bc6d7e99522 (patch) | |
| tree | 5f2958bcfc66ba096b51c73ec554dce6928a4bea | |
| parent | 459ede2b7ebcbbc85135c65991768334b460358e (diff) | |
Fix .htaccess.dist for access to /scripts/vendor/ (#7598)
* Fix .htaccess.dist for access to /scripts/vendor/
fix https://github.com/FreshRSS/FreshRSS/issues/7596
* Exclude extensions folder, which may be mounted as volume without .htaccess
| -rw-r--r-- | .htaccess.dist | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/.htaccess.dist b/.htaccess.dist index c11c9e9ab..f1b518c4a 100644 --- a/.htaccess.dist +++ b/.htaccess.dist @@ -7,6 +7,6 @@ </FilesMatch> # Deny some sub-folders, which may not be excluded by their own .htaccess -<If "%{REQUEST_URI} =~ m#/(bin|data|node_modules|vendor|\..+)(/|$)#"> +<If "%{REQUEST_URI} =~ m#(?<!/p/scripts)/(bin|data|extensions|node_modules|vendor|\..+)(/|$)#"> Require all denied </If> |