xitrum-framework / xitrum

Async and clustered Scala web framework and HTTP(S) server
http://xitrum-framework.github.io/
MIT License
446 stars 52 forks source link

Serve dot files in public directory #667

Closed ngocdaothanh closed 6 years ago

ngocdaothanh commented 6 years ago

As a precaution, Xitrum is disallowing dot files in public directory. This is a legacy idea from the age of Apache to disallow access to files like .htaccess.

Serving dot files in public directory is not a security risk to Xitrum, and it's convenient for cases like serving .well-known directory of Let's Encrypt.