[github/shaarli/Shaarli.git] / .htaccess

# Disable directory listing
Options -Indexes

RewriteEngine On

# Prevent accessing subdirectories not managed by SCM
RewriteRule ^(.git|doxygen|vendor) - [F]

# Forward the "Authorization" HTTP header
# fixes JWT token not correctly forwarded on some Apache/FastCGI setups
RewriteCond %{HTTP:Authorization} ^(.*)
RewriteRule .* - [e=HTTP_AUTHORIZATION:%1]

# REST API
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^ index.php [QSA,L]

<LimitExcept GET POST PUT DELETE PATCH OPTIONS>
  <IfModule version_module>
    <IfVersion >= 2.4>
       Require all denied
    </IfVersion>
    <IfVersion < 2.4>
       Allow from none
       Deny from all
    </IfVersion>
  </IfModule>

  <IfModule !version_module>
    Require all denied
  </IfModule>
</LimitExcept>
Commit	Line	Data
	1	# Disable directory listing
	2	Options -Indexes
	3
	4	RewriteEngine On
	5
	6	# Prevent accessing subdirectories not managed by SCM
	7	RewriteRule ^(.git\|doxygen\|vendor) - [F]
	8
	9	# Forward the "Authorization" HTTP header
	10	# fixes JWT token not correctly forwarded on some Apache/FastCGI setups
	11	RewriteCond %{HTTP:Authorization} ^(.*)
	12	RewriteRule .* - [e=HTTP_AUTHORIZATION:%1]
	13
	14	# REST API
	15	RewriteCond %{REQUEST_FILENAME} !-f
	16	RewriteCond %{REQUEST_FILENAME} !-d
	17	RewriteRule ^ index.php [QSA,L]
	18
	19	<LimitExcept GET POST PUT DELETE PATCH OPTIONS>
	20	<IfModule version_module>
	21	<IfVersion >= 2.4>
	22	Require all denied
	23	</IfVersion>
	24	<IfVersion < 2.4>
	25	Allow from none
	26	Deny from all
	27	</IfVersion>
	28	</IfModule>
	29
	30	<IfModule !version_module>
	31	Require all denied
	32	</IfModule>
	33	</LimitExcept>