Update .htaccess

Open amulet1 opened this issue 7 months ago • 3 comments

Could we drop the unrestricted access directives and instead rely on the web server global configuration?

At best it is not needed, and at worst it is a security concern as it overrides a potentially more restrictive web server configuration.

Jun 25 '25 15:06 amulet1

@ralflang, please review.

Jun 26 '25 00:06 amulet1

This needs to go along with an announcement in the ML if merged.

In the longer run we want to have this file no longer statically merged but generated on-install.

Jun 26 '25 05:06 ralflang

@TDannhauer, please could you review/merge?

Aug 06 '25 17:08 amulet1