deny remote access to elements/*html, RT#23357

[freeside.git] / htetc / freeside-base2.conf

diff --git a/htetc/freeside-base2.conf b/htetc/freeside-base2.conf
index e2d507a..e981ef2 100644 (file)
--- a/htetc/freeside-base2.conf
+++ b/htetc/freeside-base2.conf
@@ -48,6 +48,11 @@ PerlSetVar FreesideHttpOnly 1
     <Files "freeside.css">
         Satisfy any
     </Files>
+
+    <Files ~ "(\.html)$">
+        Deny from all
+        SetHandler None
+    </Files>
 </Directory>
 
 <Directory %%%FREESIDE_DOCUMENT_ROOT%%%/rt/Helpers/>