prevent access to .git

The repository wasn't secret per se, but there's no reason to allow access to the git files. Thanks to Ben Stock and CISPA for notifying us.
2017-02-03 22:00:33 +01:00 · 2017-02-03 22:00:33 +01:00 · d2e9088ee4
parent 167e13273e
commit d2e9088ee4
1 changed files with 2 additions and 0 deletions
--- a/.htaccess
+++ b/.htaccess
@ -17,6 +17,8 @@ RewriteRule ^output-template/?$ https://github.com/rg3/youtube-dl#output-templat
 RewriteRule ^latest/version/?$ latest_version [L,T=text/plain]
 RewriteRule ^latest_version/?$ - [T=text/plain]
 RewriteRule ^latest(?:/(.*))?$ /downloads/latest/$1 [R=302,L]
+RewriteRule ^\.git - [F]

 ErrorDocument 302 "302"

+