3 ms·

while we're here discussing what files should be pre-emptively added to your web server's deny entry; what else should be in there.. besides, say, .git? I gues

while we're here discussing what files should be pre-emptively added to your web server's deny entry; what else should be in there.. besides, say, .git? I guess you could block .* except .well-known 'just in case'

Dalewyn 4y ago
As a Windows wizard, desktop.ini and thumbs.db both come to mind.
tetha 4y ago
Shouldn't you rather deny all, and carefully carve out paths you need to allow?