From: Frédéric Buclin <LpSolit@gmail.com>
Date: Thu, 30 Aug 2012 18:15:07 +0000 (+0200)
Subject: Bug 785522: [SECURITY] Block access to templates in extensions/
X-Git-Tag: bugzilla-4.3.3~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1ff417cbaa2905f64d4417290c4255080884ee02;p=thirdparty%2Fbugzilla.git

Bug 785522: [SECURITY] Block access to templates in extensions/
r=glob a=LpSolit
---

diff --git a/.htaccess b/.htaccess
index 27f478afda..3b464a475b 100644
--- a/.htaccess
+++ b/.htaccess
@@ -1,5 +1,5 @@
 # Don't allow people to retrieve non-cgi executable files or our private data
-<FilesMatch ^(.*\.pm|.*\.pl|.*localconfig.*)$>
+<FilesMatch (\.pm|\.pl|\.tmpl|localconfig.*)$>
   deny from all
 </FilesMatch>