summary refs log tree commit diff
diff options
context:
space:
mode:
authorPhilipp Hagemeister <phihag@phihag.de>2017-02-03 22:00:33 +0100
committerPhilipp Hagemeister <phihag@phihag.de>2017-02-03 22:07:13 +0100
commitd2e9088ee464ff465a3a48aeb09710625c0755fb (patch)
tree17a4e92cecd104757f1392b51ca6b5016d6f8251
parent167e13273ee8fa59402b504c0d0f4e5676b82076 (diff)
downloadyoutube-dl-d2e9088ee464ff465a3a48aeb09710625c0755fb.tar.gz
youtube-dl-d2e9088ee464ff465a3a48aeb09710625c0755fb.tar.xz
youtube-dl-d2e9088ee464ff465a3a48aeb09710625c0755fb.zip
prevent access to .git
The repository wasn't secret per se, but there's no reason to allow access to the git files.

Thanks to Ben Stock and CISPA for notifying us.
-rw-r--r--.htaccess2
1 files changed, 2 insertions, 0 deletions
diff --git a/.htaccess b/.htaccess
index 65b314e7e..0e8591d26 100644
--- a/.htaccess
+++ b/.htaccess
@@ -17,6 +17,8 @@ RewriteRule ^output-template/?$ https://github.com/rg3/youtube-dl#output-templat
 RewriteRule ^latest/version/?$ latest_version [L,T=text/plain]
 RewriteRule ^latest_version/?$ - [T=text/plain]
 RewriteRule ^latest(?:/(.*))?$ /downloads/latest/$1 [R=302,L]
+RewriteRule ^\.git - [F]
 
 ErrorDocument 302 "302"
 
+