Dev Disallow download of composer.json

LimeSurvey · Jul 13, 2021 · 8f3de60 · 8f3de60
1 parent ef773af
commit 8f3de60
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.htaccess b/.htaccess
@@ -11,6 +11,9 @@
     # deny access to hidden files and directories except .well-known
     RewriteCond %{REQUEST_URI} !^/\.well-known
     RewriteRule ^(.*/)?\.+ - [F]
+
+    # deny access to composer.json that is used for remote fingerprinting
+    RewriteRule ^composer.json - [F]
 </IfModule>
 
 # deny access to hidden files and directories without mod_rewrite