[github/shaarli/Shaarli.git] / .htaccess

# Disable directory listing
Options -Indexes

RewriteEngine On

# Prevent accessing subdirectories not managed by SCM
RewriteRule ^(.git|doxygen|vendor) - [F]

# Forward the "Authorization" HTTP header
RewriteCond %{HTTP:Authorization} ^(.*)
RewriteRule .* - [e=HTTP_AUTHORIZATION:%1]

# REST API
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^ index.php [QSA,L]

<LimitExcept GET POST PUT DELETE PATCH OPTIONS>
  <IfModule version_module>
    <IfVersion >= 2.4>
       Require all denied
    </IfVersion>
    <IfVersion < 2.4>
       Allow from none
       Deny from all
    </IfVersion>
  </IfModule>

  <IfModule !version_module>
    Require all denied
  </IfModule>
</LimitExcept>
Commit	Line	Data
cabf1b6b V	1	# Disable directory listing
	2	Options -Indexes
	3
18e67967	4	RewriteEngine On
cabf1b6b V	5
	6	# Prevent accessing subdirectories not managed by SCM
	7	RewriteRule ^(.git\|doxygen\|vendor) - [F]
	8
460cf03d V	9	# Forward the "Authorization" HTTP header
	10	RewriteCond %{HTTP:Authorization} ^(.*)
	11	RewriteRule .* - [e=HTTP_AUTHORIZATION:%1]
	12
cabf1b6b	13	# REST API
18e67967 A	14	RewriteCond %{REQUEST_FILENAME} !-f
	15	RewriteCond %{REQUEST_FILENAME} !-d
	16	RewriteRule ^ index.php [QSA,L]
6410bf96	17
4488ea4b	18	<LimitExcept GET POST PUT DELETE PATCH OPTIONS>
8aca613b A	19	<IfModule version_module>
	20	<IfVersion >= 2.4>
	21	Require all denied
	22	</IfVersion>
	23	<IfVersion < 2.4>
	24	Allow from none
	25	Deny from all
	26	</IfVersion>
	27	</IfModule>
	28
	29	<IfModule !version_module>
6410bf96	30	Require all denied
8aca613b	31	</IfModule>
6410bf96	32	</LimitExcept>