Apache revealing dotfiles

Jun 01, 2010 12:30

Just a reminder... if you're using Apache to offer listings of directories, and those directories may be mounted by an OS X host, you probably don't want to publish any dotfiles that OS X creates (like .DS_Store) to the world. afpd will MIME-translate the dots, so they start :2e. It's beneficial to add this to your httpd.conf:

# Prevent OS X-created dotfiles from being presented

Order allow,deny
Deny from all
Satisfy All
Previous post Next post
Up