The line spacing in the private and temporary directory .htaccess files is off:

# Deny all requests from Apache 2.4+.
<IfModule mod_authz_core.c>
  Require all denied
</IfModule>

# Deny all requests from Apache 2.0-2.2.
<IfModule !mod_authz_core.c>
  Deny from all
</IfModule>
# Turn off all options we don't need.
Options -Indexes -ExecCGI -Includes -MultiViews

There should be a space before the "Turn off all options" line since everything below that is unrelated to everything above.

This is being fixed for Drupal 7 as part of the backport of #1599774: Drupal fails to boot with 503 error and .htaccess protections do not work on Apache 2.4 without mod_access_compat (the issue that led to this in the first place). Here is a fix for Drupal 8.

CommentFileSizeAuthor
#2 2883821-2.patch426 bytesDavid_Rothstein

Comments

David_Rothstein created an issue. See original summary.

David_Rothstein’s picture

David_Rothstein commented
Status: Active » Needs review
StatusFileSize
new 2883821-2.patch426 bytes

Version: 8.3.x-dev » 8.4.x-dev

Drupal 8.3.6 was released on August 2, 2017 and is the final full bugfix release for the Drupal 8.3.x series. Drupal 8.3.x will not receive any further development aside from critical and security fixes. Sites should prepare to update to 8.4.0 on October 4, 2017. (Drupal 8.4.0-alpha1 is available for testing.)

Bug reports should be targeted against the 8.4.x-dev branch from now on, and new development or disruptive changes should be targeted against the 8.5.x-dev branch. For more information see the Drupal 8 minor version schedule and the Allowed changes during the Drupal 8 release cycle.

Version: 8.4.x-dev » 8.5.x-dev

Drupal 8.4.4 was released on January 3, 2018 and is the final full bugfix release for the Drupal 8.4.x series. Drupal 8.4.x will not receive any further development aside from critical and security fixes. Sites should prepare to update to 8.5.0 on March 7, 2018. (Drupal 8.5.0-alpha1 is available for testing.)

Bug reports should be targeted against the 8.5.x-dev branch from now on, and new development or disruptive changes should be targeted against the 8.6.x-dev branch. For more information see the Drupal 8 minor version schedule and the Allowed changes during the Drupal 8 release cycle.

longwave’s picture

longwave
he/him
Primary language English
Location UK
commented
Status: Needs review » Reviewed & tested by the community

As trivial as can be.

alexpott’s picture

alexpott
he/they
Primary language English
Location 🇪🇺🌍
commented
Version: 8.5.x-dev » 8.6.x-dev
Status: Reviewed & tested by the community » Fixed

As a task (and not a bug) committed to 8.6.x.

Committed 3bcb50a and pushed to 8.6.x. Thanks!

  • alexpott committed 3bcb50a on 8.6.x 
    Issue #2883821 by David_Rothstein: Fix incorrect line spacing in private...

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.