From: Frédéric Buclin <LpSolit@gmail.com>
Date: Thu, 30 Aug 2012 18:18:44 +0000 (+0200)
Subject: Bug 785522: [SECURITY] Block access to templates in extensions/
X-Git-Tag: bugzilla-4.0.8~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=646ee0095faf47dcf3f44561f147d11f0205848c;p=thirdparty%2Fbugzilla.git

Bug 785522: [SECURITY] Block access to templates in extensions/
r=glob a=LpSolit
---

diff --git a/.htaccess b/.htaccess
index 4b06fe9a9c..c16ee19af0 100644
--- a/.htaccess
+++ b/.htaccess
@@ -1,5 +1,5 @@
 # Don't allow people to retrieve non-cgi executable files or our private data
-<FilesMatch ^(.*\.pm|.*\.pl|.*localconfig.*)$>
+<FilesMatch (\.pm|\.pl|\.tmpl|localconfig.*)$>
   deny from all
 </FilesMatch>
 <IfModule mod_expires.c>