view modules/website/files/conf.extra/no-index.conf @ 476:b0531370e183

Avoid fully controllable rewrite prefix Apache doesn't guarantee that rewrites are URLs or paths within the prefix and will process them rather than error, so close a fully controllable rewrite prefix: https://blog.orange.tw/2024/08/confusion-attacks-en.html?m=1
author IBBoard <dev@ibboard.co.uk>
date Sun, 11 Aug 2024 13:29:59 +0100
parents 956e484adc12
children
line wrap: on
line source

RewriteEngine On
RewriteRule ^(/.+)?/index.(php|htm(l?))$ $1/ [R=301,L]