while we're here discussing what files should be pre-emptively added to your web... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		ehPReth on March 28, 2023 \| parent \| context \| favorite \| on: Parsing the .DS_Store File Format (2018) while we're here discussing what files should be pre-emptively added to your web server's deny entry; what else should be in there.. besides, say, .git? I guess you could block .* except .well-known 'just in case'

tetha on March 28, 2023 | [–]

Shouldn't you rather deny all, and carefully carve out paths you need to allow?

Dalewyn on March 28, 2023 | [–]

As a Windows wizard, desktop.ini and thumbs.db both come to mind.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact