12.7.1. Block sensitive Rest urls with Apache

Warning

You are looking at documentation for an older release. Not what you want? See the current release documentation.

...

      # Block login history for performance and security reasons
      RewriteRule             "/rest/loginhistory/loginhistory/AllUsers"            - [L,NC,R=403]
      RewriteRule             "/rest/private/loginhistory/loginhistory/AllUsers/*"  - [L,NC,R=403]

      # Block access to trash folder
      RewriteRule             "/rest/jcr/repository/collaboration/Trash"            - [L,NC,R=403]

      # Don't expose REST APIs listing (ITOP-2406)
      RewriteRule             "^/rest/?$"         -                   [NC,F,L]
      RewriteRule             "^/portal/rest/?$"  -                   [NC,F,L]
          ...