I have noted that in default Magento .htaccess the /errors/ folder is accessible and open it in a browser list the content of the folder.
How to address it ?
Add Options -Indexes to the main .htaccess is safe ?
The errors folder should not be accessible. See an example here. Most probably you are missing something in the .htaccess file. Try to get one from the fresh Magento copy.
Also make sure that you have this .htaccess file inside the errors folder.
<FilesMatch "\.(xml|phtml)$">
Deny from all
</FilesMatch>
-
-
I commented out the <FilesMatch "\.(xml|phtml)$"> and </FilesMatch> to prevent the access to errors folder and we are on Litespeed. It doesn't break anything with the error pages. – Haijerome Jul 8 '14 at 15:42
