54 lines
1.9 KiB
Plaintext
54 lines
1.9 KiB
Plaintext
|
# General Security .htaccess Rules - WordOps {{release}}
|
||
|
|
# DO NOT MODIFY, ALL CHANGES WILL BE LOST AFTER AN WordOps (wo) UPDATE
|
||
|
|
|
||
|
|
# Deny access to hidden files (except .well-known)
|
||
|
|
<IfModule mod_rewrite.c>
|
||
|
|
RewriteEngine On
|
||
|
|
RewriteRule "(^|/)\.(?!well-known\/)" - [F]
|
||
|
|
</IfModule>
|
||
|
|
|
||
|
|
# Deny access to backup, log, and config files
|
||
|
|
<FilesMatch "\.(old|orig|original|php#|php~|php_bak|save|swo|aspx?|tpl|sh|bash|bak?|cfg|cgi|dll|exe|git|hg|ini|jsp|log|mdb|out|sql|svn|swp|tar|rdf|gz|zip|bz2|7z|pem|asc|conf|dump)$">
|
||
|
|
Order Deny,Allow
|
||
|
|
Deny from all
|
||
|
|
</FilesMatch>
|
||
|
|
|
||
|
|
# Deny access to readme, license, and similar files
|
||
|
|
<FilesMatch "(readme|license|example|README|LEGALNOTICE|INSTALLATION|CHANGELOG)\.(txt|html|md)$">
|
||
|
|
Order Deny,Allow
|
||
|
|
Deny from all
|
||
|
|
</FilesMatch>
|
||
|
|
|
||
|
|
# Cache static files
|
||
|
|
<IfModule mod_expires.c>
|
||
|
|
ExpiresActive On
|
||
|
|
ExpiresByType image/jpeg "access plus 1 year"
|
||
|
|
ExpiresByType image/gif "access plus 1 year"
|
||
|
|
ExpiresByType image/png "access plus 1 year"
|
||
|
|
ExpiresByType image/webp "access plus 1 year"
|
||
|
|
ExpiresByType image/svg+xml "access plus 1 year"
|
||
|
|
ExpiresByType image/x-icon "access plus 1 year"
|
||
|
|
ExpiresByType text/css "access plus 1 year"
|
||
|
|
ExpiresByType application/javascript "access plus 1 year"
|
||
|
|
ExpiresByType application/x-javascript "access plus 1 year"
|
||
|
|
ExpiresByType font/ttf "access plus 1 year"
|
||
|
|
ExpiresByType font/otf "access plus 1 year"
|
||
|
|
ExpiresByType font/woff "access plus 1 year"
|
||
|
|
ExpiresByType font/woff2 "access plus 1 year"
|
||
|
|
</IfModule>
|
||
|
|
|
||
|
|
# CORS headers for static assets
|
||
|
|
<IfModule mod_headers.c>
|
||
|
|
<FilesMatch "\.(ttf|ttc|otf|eot|woff|woff2|font\.css|css|js|gif|png|jpe?g|svg|svgz|ico|webp)$">
|
||
|
|
Header set Access-Control-Allow-Origin "*"
|
||
|
|
</FilesMatch>
|
||
|
|
</IfModule>
|
||
|
|
|
||
|
|
# Security headers
|
||
|
|
<IfModule mod_headers.c>
|
||
|
|
Header set X-Frame-Options "SAMEORIGIN"
|
||
|
|
Header set X-Content-Type-Options "nosniff"
|
||
|
|
Header set Referrer-Policy "strict-origin-when-cross-origin"
|
||
|
|
Header set X-Powered-By "WordOps"
|
||
|
|
</IfModule>
|