Only pass Authorization header to PHP if set

getkirby/kirby#4634 (comment)
getkirby · Oct 6, 2022 · 44812f9 · 44812f9
1 parent 0861613
commit 44812f9
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.htaccess b/.htaccess
@@ -1,5 +1,5 @@
 # Kirby .htaccess
-# revision 2020-06-15
+# revision 2022-09-15
 
 # rewrite rules
 <IfModule mod_rewrite.c>
@@ -43,7 +43,7 @@ RewriteRule ^(.*) index.php [L]
 </IfModule>
 
 # pass the Authorization header to PHP
-SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
+SetEnvIf Authorization "(.+)" HTTP_AUTHORIZATION=$1
 
 # compress text file responses
 <IfModule mod_deflate.c>