From: Frédéric Buclin <LpSolit@gmail.com>
Date: Thu, 30 Aug 2012 18:16:58 +0000 (+0200)
Subject: Bug 785522: [SECURITY] Block access to templates in extensions/
X-Git-Tag: bugzilla-4.2.3~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2d212c52ae394a18286e68ed81e7654c0fb7e3af;p=thirdparty%2Fbugzilla.git

Bug 785522: [SECURITY] Block access to templates in extensions/
r=glob a=LpSolit
---

diff --git a/.htaccess b/.htaccess
index 4b06fe9a9c..c16ee19af0 100644
--- a/.htaccess
+++ b/.htaccess
@@ -1,5 +1,5 @@
 # Don't allow people to retrieve non-cgi executable files or our private data
-<FilesMatch ^(.*\.pm|.*\.pl|.*localconfig.*)$>
+<FilesMatch (\.pm|\.pl|\.tmpl|localconfig.*)$>
   deny from all
 </FilesMatch>
 <IfModule mod_expires.c>