By kim.pepper on
Change record status: 
Published (View all published change records)
Project: 
Drupal core
Introduced in branch: 
11.3.x
Introduced in version: 
11.3.0
Issue links: 
https://www.drupal.org/node/360057
Description: 

Sites not using the Apache HTTP server or that use a web server configuration that protects writable file directories can disable the creation of the .htaccess.

To disable file creation auto_create_htaccess must be set to FALSE in the site settings.php file.

Example

$settings['auto_create_htaccess'] = FALSE

If disabled, make sure to follow the guide for ensuring directories are secure and prevent scripts from being executed.

Impacts: 
Site builders, administrators, editors
Module developers
Themers
Site templates, recipes and distribution developers