From 61a15c877f5389b6df53bac8ae07ce5a2a5f6800 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Tue, 30 Jul 2019 16:31:21 +0200
Subject: [PATCH] protect utils and doc directory

---
 .htaccess | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.htaccess b/.htaccess
index 80d7e878f..42ab85d6c 100644
--- a/.htaccess
+++ b/.htaccess
@@ -6,6 +6,10 @@ RewriteRule ^favicon.ico$ styles/bootstrap/favicon.ico [L]
 RewriteCond $0#%{REQUEST_URI} ([^#]*)#(.*)\1$
 RewriteRule ^.*$ - [E=CWD:%2]
 
+# Do not allow access on the other directories in www
+RewriteRule "^utils/.*$" "" [F]
+RewriteRule "^doc/.*$" "" [F]
+
 # Anything below the following dirs will never be rewritten
 RewriteRule "^pdfviewer/.*$" "-" [L]
 RewriteRule "^views/bootstrap/images.*$" "-" [L]