# # Whitelist appropriate assets files. # This file is automatically generated via File.allowed_extensions configuration # See AssetAdapter::renderTemplate() for reference. # SetEnv HTTP_MOD_REWRITE On RewriteEngine On # Disable PHP handler RewriteCond %{REQUEST_URI} .(?i:php|phtml|php3|php4|php5|inc)$ RewriteRule .* - [F] # Allow error pages RewriteCond %{REQUEST_FILENAME} -f RewriteRule error[^\\/]*\.html$ - [L] # Block invalid file extensions RewriteCond %{REQUEST_URI} !\.(?i:ace|arc|arj|asf|au|avi|bmp|bz2|cab|cda|css|csv|dmg|doc|docx|dotx|dotm|flv|gif|gpx|gz|hqx|ico|jar|jpeg|jpg|js|kml|m4a|m4v|mid|midi|mkv|mov|mp3|mp4|mpa|mpeg|mpg|ogg|ogv|pages|pcx|pdf|png|pps|ppt|pptx|potx|potm|ra|ram|rm|rtf|sit|sitx|tar|tgz|tif|tiff|txt|wav|webm|wma|wmv|xls|xlsx|xltx|xltm|zip|zipx)$ RewriteRule .* - [F] # Non existant files passed to requesthandler RewriteCond %{REQUEST_URI} ^(.*)$ RewriteCond %{REQUEST_FILENAME} !-f RewriteRule .* ../index.php [QSA]