fix: ds

2026-09-05 20:18:30 +08:00
parent f67da8a102
commit f94def7c1f
4 changed files with 23 additions and 14 deletions
@@ -5,10 +5,11 @@

    RewriteEngine On

-    # Builder state must never be served from public/ (defense in depth).
+    # Builder state / leftover app logs must never be served from public/.
    RewriteRule ^lab_seeds\.json$ - [F,L]
    RewriteRule ^manifest\.latest\.json$ - [F,L]
    RewriteRule ^out(/|$) - [F,L]
+    RewriteRule ^log(/|$) - [F,L]

    # Handle Authorization Header
    RewriteCond %{HTTP:Authorization} .