summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFrédéric Buclin <LpSolit@gmail.com>2012-08-30 20:16:58 +0200
committerFrédéric Buclin <LpSolit@gmail.com>2012-08-30 20:16:58 +0200
commit2d212c52ae394a18286e68ed81e7654c0fb7e3af (patch)
tree403cc70e64ec6e81a313ed812a6f2dfaded199b1
parent971c0a4fe0e1e88ad35f041254101cfcaadfc723 (diff)
downloadbugzilla-2d212c52ae394a18286e68ed81e7654c0fb7e3af.tar.gz
bugzilla-2d212c52ae394a18286e68ed81e7654c0fb7e3af.tar.xz
Bug 785522: [SECURITY] Block access to templates in extensions/
r=glob a=LpSolit
-rw-r--r--.htaccess2
1 files changed, 1 insertions, 1 deletions
diff --git a/.htaccess b/.htaccess
index 4b06fe9a9..c16ee19af 100644
--- a/.htaccess
+++ b/.htaccess
@@ -1,5 +1,5 @@
# Don't allow people to retrieve non-cgi executable files or our private data
-<FilesMatch ^(.*\.pm|.*\.pl|.*localconfig.*)$>
+<FilesMatch (\.pm|\.pl|\.tmpl|localconfig.*)$>
deny from all
</FilesMatch>
<IfModule mod_expires.c>