Add a README for the tests, and block the development files.

2026-09-26 15:27:51 +02:00
parent b7022ab486
commit 5593341b04
2 changed files with 82 additions and 0 deletions
@@ -5,3 +5,13 @@
 <FilesMatch "^\.">
  Require all denied
 </FilesMatch>
+
+# Do not serve the development files: the tests, the packages that
+# Composer and npm install, and their configuration. These files are not
+# needed on the live site (see README.md).
+<If "%{REQUEST_URI} =~ m#^/(vendor|node_modules|tests)(/|$)#">
+  Require all denied
+</If>
+<FilesMatch "^(composer\.(json|lock|phar)|package(-lock)?\.json|phpunit\.xml(\.dist)?)$">
+  Require all denied
+</FilesMatch>