We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent c5c7a20 commit b9641c4Copy full SHA for b9641c4
global/server/exclusions.conf
@@ -1,6 +1,11 @@
1
# Deny all attempts to access hidden files such as .htaccess, .htpasswd, .DS_Store (Mac).
2
# Keep logging the requests to parse later (or to pass to firewall utilities such as fail2ban)
3
-location ~ /\. {
+location ~* /\.(?!well-known\/) {
4
+ deny all;
5
+}
6
+
7
+# Prevent access to certain file extensions
8
+location ~\.(ini|log|conf)$ {
9
deny all;
10
}
11
0 commit comments