Open danielbachhuber opened 6 years ago
This kind of problem crops up with ModSecurity, too. It probably would be worthwhile to factor that in when checking for blocks on the request method. Folks used to think restricting the HTTP methods your server can do makes the server more secure. There might be something to some of that for some methods, but I think the "standard" ModSecurity config only allows GET, POST, OPTIONS, and HEAD
Because the
.htaccess
file is a part of many hosts' web server configuration, we should have some recommended dos and don'ts.For instance, to prevent situations like this (not to call SiteGround out):
Even better would be some form of automated checker :)
From https://github.com/WordPress/gutenberg/issues/2704#issuecomment-329231370