Enable /.well-known/security.txt

[veerareddyc1015]

Hi Team,

I have a requirement to enable the /.well-known/security.txt for all of my domains, can you please suggest me to do the same.

Thanks in Advance.

Thanks & Regards

Veera

[iamnjain]

Hello @veerareddyc1015 

We have recently enabled https://domain.com/.well-known/assetlink.json file to enable Universal Links between a website and app. We hosted assetlink.json file on AEM and used Dispatcher rewrites to handle redirection.

Are you looking for something like this with "security.txt" file?

[veerareddyc1015]

Hi @iamnjain ,

I am looking for the same with "security.txt",

Can you please help me with the dispatcher rewrite rules if possible.

I have tried with below but it's blocking in dispatcher.

Thanks & Regards

Veera

[iamnjain · Accepted solution]

Hi Veera,

You need to do two things,

1. Allow specific paths in filters.any file in dispatcher. I have allowed like below

/0106 { /type "allow" /method "GET" /url "*/.well-known/apple-app-site-association"}
/0107 { /type "allow" /method "GET" /url "*/well-known/apple-app-site-association"}

2. Add rewrites in rewrites.rules file to redirect incoming request from /.well-known/security.txt to your respective path.

For my project, I added below rule

RewriteRule ^/.well-known/apple-app-site-association$ /content/dam/project_name/well-known/apple-app-site-association [PT,L]

After this it will work.

Hope this help!

@veerareddyc1015Issue resolved or if you stuck then let me know?