[security] deny access to composer.lock (#6117)

7 years ago · 8bd55ea549
parent b172fb505c
commit 8bd55ea549
1 changed files with 1 additions and 1 deletions
--- a/.htaccess
+++ b/.htaccess
@ -33,7 +33,7 @@ RewriteRule ^/?(\.git|\.tx|SQL|bin|config|logs|temp|tests|program\/(include|lib|
 # - deny access to composer binaries
 RewriteRule ^/vendor\/bin\/.* - [F]
 # - deny access to some documentation files
-RewriteRule /?(README\.md|composer\.json-dist|composer\.json|package\.xml|jsdeps.json)$ - [F]
+RewriteRule /?(README\.md|composer\.json-dist|composer\.json|composer\.lock|package\.xml|jsdeps.json)$ - [F]
 </IfModule>

 <IfModule mod_deflate.c>