[github/shaarli/Shaarli.git] / .htaccess

# Disable directory listing
Options -Indexes

RewriteEngine On

# Prevent accessing subdirectories not managed by SCM
RewriteRule ^(.git|doxygen|vendor) - [F]

# Forward the "Authorization" HTTP header
# fixes JWT token not correctly forwarded on some Apache/FastCGI setups
RewriteCond %{HTTP:Authorization} ^(.*)
RewriteRule .* - [e=HTTP_AUTHORIZATION:%1]

# REST API
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^ index.php [QSA,L]

<LimitExcept GET POST PUT DELETE PATCH OPTIONS>
  <IfModule version_module>
    <IfVersion >= 2.4>
       Require all denied
    </IfVersion>
    <IfVersion < 2.4>
       Allow from none
       Deny from all
    </IfVersion>
  </IfModule>

  <IfModule !version_module>
    Require all denied
  </IfModule>
</LimitExcept>
Commit	Line	Data
cabf1b6b V	1	# Disable directory listing
	2	Options -Indexes
	3
18e67967	4	RewriteEngine On
cabf1b6b V	5
	6	# Prevent accessing subdirectories not managed by SCM
	7	RewriteRule ^(.git\|doxygen\|vendor) - [F]
	8
460cf03d	9	# Forward the "Authorization" HTTP header
91a21c27	10	# fixes JWT token not correctly forwarded on some Apache/FastCGI setups
460cf03d V	11	RewriteCond %{HTTP:Authorization} ^(.*)
	12	RewriteRule .* - [e=HTTP_AUTHORIZATION:%1]
	13
cabf1b6b	14	# REST API
18e67967 A	15	RewriteCond %{REQUEST_FILENAME} !-f
	16	RewriteCond %{REQUEST_FILENAME} !-d
	17	RewriteRule ^ index.php [QSA,L]
6410bf96	18
4488ea4b	19	<LimitExcept GET POST PUT DELETE PATCH OPTIONS>
8aca613b A	20	<IfModule version_module>
	21	<IfVersion >= 2.4>
	22	Require all denied
	23	</IfVersion>
	24	<IfVersion < 2.4>
	25	Allow from none
	26	Deny from all
	27	</IfVersion>
	28	</IfModule>
	29
	30	<IfModule !version_module>
6410bf96	31	Require all denied
8aca613b	32	</IfModule>
6410bf96	33	</LimitExcept>