diff --git a/apps/drupal/drupal.conf b/apps/drupal/drupal.conf index 71578b3c..f9e04fe7 100644 --- a/apps/drupal/drupal.conf +++ b/apps/drupal/drupal.conf @@ -211,7 +211,7 @@ location / { ## Replicate the Apache directive of Drupal standard ## .htaccess. Disable access to any code files. Return a 404 to curtail ## information disclosure. Hide also the text files. - location ~* ^(?:.+\.(?:htaccess|make|txt|engine|inc|info|install|module|profile|po|pot|sh|.*sql|test|theme|tpl(?:\.php)?|xtmpl)|code-style\.pl|/Entries.*|/Repository|/Root|/Tag|/Template)$ { + location ~* ^(?:.+\.(?:htaccess|make|txt|engine|inc|info|install|module|profile|po|pot|sh|.*sql|test|theme|tpl(?:\.php)?|xtmpl|yml)|code-style\.pl|/Entries.*|/Repository|/Root|/Tag|/Template)$ { return 404; }