Merge pull request #5071 from chihiro-adachi/4.0.6

Update 4.0.6
EC-CUBE · Jun 22, 2021 · c683885 · c683885
2 parents 863e6dc + 007f006
commit c683885
Show file tree

Hide file tree

Showing 7 changed files with 652 additions and 706 deletions.
diff --git a/.htaccess b/.htaccess
@@ -5,11 +5,18 @@ DirectoryIndex index.php index.html .ht
     deny from all
 </FilesMatch>
 
-<Files ~ "index.php">
+<Files ~ "/index.php">
     order deny,allow
     allow from all
 </Files>
 
+<FilesMatch "(?<!\.gif|\.png|\.jpg|\.jpeg|\.css|\.ico|\.js|\.svg|\.map)$">
+    SetEnvIf Request_URI "/vendor/" deny_dir
+    Order allow,deny
+    Deny from env=deny_dir
+    Allow from all
+</FilesMatch>
+
 <IfModule mod_headers.c>
     # クリックジャッキング対策
     Header always set X-Frame-Options SAMEORIGIN