From d9e4862b71de71289e76fdf16a251ffda3190426 Mon Sep 17 00:00:00 2001
From: Alice <alice@akuma.me>
Date: Fri, 27 Jun 2025 19:07:46 +0000
Subject: [PATCH] Fix security vulnerability - image_metadata.json is publicly
 accessible, therefore all uploads are visible to all users

---
 .htaccess | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 .htaccess

diff --git a/.htaccess b/.htaccess
new file mode 100644
index 0000000..6af108f
--- /dev/null
+++ b/.htaccess
@@ -0,0 +1,4 @@
+<Files "image_metadata.json">
+Deny from all
+</Files>
+