Perhaps a blanket block of dot files with the exception of .well-known directory for TLS certs.
@Bloke @philwareham - do you know of anything in Textpattern or its associated stuff that utilises dot files? I've got working regex to block all but .well-known but I might be missing something.
Should block access to:
.git*(git internals).ht*(e.g..htaccessand.htpasswd)Perhaps a blanket block of dot files with the exception of
.well-knowndirectory for TLS certs.@Bloke @philwareham - do you know of anything in Textpattern or its associated stuff that utilises dot files? I've got working regex to block all but
.well-knownbut I might be missing something.