Security: Add forbidden access to .yml and .yml.dist to .htaccess - refs BT#20295

3 years ago · 37b205d258
parent 76fc52977d
commit 37b205d258
1 changed files with 1 additions and 0 deletions
--- a/.htaccess
+++ b/.htaccess
@ -16,6 +16,7 @@ RedirectMatch 403 ^/app/(?!courses/proxy)(cache|courses|home|logs|upload|Resourc
 RedirectMatch 403 ^/main/default_course_document/images/.*\.ph(p[3457]?|t|tml|ar)$
 RedirectMatch 403 ^/main/lang/.*\.ph(p[3457]?|t|tml|ar)$
 RedirectMatch 403 ^/web/.*\.ph(p[3457]?|t|tml|ar)$
+RedirectMatch 403 ^/app/config/.*\.yml(\.dist)?$

 # http://my.chamilo.net/certificates/?id=123 to http://my.chamilo.net/certificates/index.php?id=123
 RewriteCond %{QUERY_STRING} ^id=(.*)$