deny remote access to elements/*html, RT#23357
[freeside.git] / htetc / freeside-base2.conf
1 PerlModule Apache2::compat
2
3 #PerlModule Apache::DBI
4
5 PerlModule HTML::Mason
6 PerlSetVar MasonArgsMethod CGI
7 PerlModule HTML::Mason::ApacheHandler
8
9 PerlChildInitHandler "sub { srand }"
10
11 PerlRequire "%%%MASON_HANDLER%%%"
12
13 #Locale::SubCountry
14 #
15 AddDefaultCharset UTF-8
16
17 <Directory %%%FREESIDE_DOCUMENT_ROOT%%%>
18
19     AuthName Freeside
20     AuthType Basic
21     AuthUserFile %%%FREESIDE_CONF%%%/htpasswd
22     require valid-user
23
24     <Files ~ "(\.cgi|\.html)$">
25         SetHandler perl-script
26         PerlHandler HTML::Mason
27     </Files>
28
29 </Directory>
30
31 <Directory %%%FREESIDE_DOCUMENT_ROOT%%%/elements/>
32     <Files ~ "(\.html)$">
33         Deny from all
34         SetHandler None
35     </Files>
36 </Directory>
37
38 <Directory %%%FREESIDE_DOCUMENT_ROOT%%%/rt/Helpers/>
39     SetHandler perl-script
40     PerlHandler HTML::Mason
41 </Directory>
42
43 <Directory %%%FREESIDE_DOCUMENT_ROOT%%%/loginout>
44     AuthName Freeside
45     AuthType Basic
46     AuthUserFile %%%FREESIDE_CONF%%%/htpasswd.logout
47     require valid-user
48     <Files ~ "(\.cgi|\.html)$">
49         SetHandler default-handler
50     </Files>
51 </Directory>
52