Enable /.well-known/security.txt | Community
Skip to main content
veerareddyc1015
Level 3
August 24, 2023
Solved

Enable /.well-known/security.txt

  • August 24, 2023
  • 1 reply
  • 2476 views

Hi Team,

 

I have a requirement to enable the /.well-known/security.txt for all of my domains, can you please suggest me to do the same.

 

Thanks in Advance.

 

Thanks & Regards

Veera

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by iamnjain

Hi Veera,

 

You need to do two things,

1. Allow specific paths in filters.any file in dispatcher. I have allowed like below

 

/0106 { /type "allow" /method "GET" /url "*/.well-known/apple-app-site-association"} /0107 { /type "allow" /method "GET" /url "*/well-known/apple-app-site-association"}

 

2. Add rewrites in rewrites.rules file to redirect incoming request from /.well-known/security.txt to your respective path.

For my project, I added below rule

 

RewriteRule ^/.well-known/apple-app-site-association$ /content/dam/project_name/well-known/apple-app-site-association [PT,L]

 

 

After this it will work.

Hope this help! 🙂

 

@veerareddyc1015Issue resolved or if you stuck then let me know?

1 reply

iamnjain
Community Advisor
Community Advisor
August 24, 2023

Hello @veerareddyc1015 

 

We have recently enabled https://domain.com/.well-known/assetlink.json file to enable Universal Links between a website and app. We hosted assetlink.json file on AEM and used Dispatcher rewrites to handle redirection.

 

Are you looking for something like this with "security.txt" file?

veerareddyc1015
Level 3
August 24, 2023

Hi @iamnjain ,

 

I am looking for the same with "security.txt",

Can you please help me with the dispatcher rewrite rules if possible.

I have tried with below but it's blocking in dispatcher.

 

Thanks & Regards

Veera

iamnjain
Community Advisor
iamnjainCommunity AdvisorAccepted solution
Community Advisor
August 24, 2023

Hi Veera,

 

You need to do two things,

1. Allow specific paths in filters.any file in dispatcher. I have allowed like below

 

/0106 { /type "allow" /method "GET" /url "*/.well-known/apple-app-site-association"} /0107 { /type "allow" /method "GET" /url "*/well-known/apple-app-site-association"}

 

2. Add rewrites in rewrites.rules file to redirect incoming request from /.well-known/security.txt to your respective path.

For my project, I added below rule

 

RewriteRule ^/.well-known/apple-app-site-association$ /content/dam/project_name/well-known/apple-app-site-association [PT,L]

 

 

After this it will work.

Hope this help! 🙂

 

@veerareddyc1015Issue resolved or if you stuck then let me know?