Enable /.well-known/security.txt | Community
Skip to main content
veerareddyc1015
New Participant
August 24, 2023
Solved

Enable /.well-known/security.txt

  • August 24, 2023
  • 1 reply
  • 2475 views

Hi Team,

 

I have a requirement to enable the /.well-known/security.txt for all of my domains, can you please suggest me to do the same.

 

Thanks in Advance.

 

Thanks & Regards

Veera

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by iamnjain

Hi Veera,

 

You need to do two things,

1. Allow specific paths in filters.any file in dispatcher. I have allowed like below

 

/0106 { /type "allow" /method "GET" /url "*/.well-known/apple-app-site-association"} /0107 { /type "allow" /method "GET" /url "*/well-known/apple-app-site-association"}

 

2. Add rewrites in rewrites.rules file to redirect incoming request from /.well-known/security.txt to your respective path.

For my project, I added below rule

 

RewriteRule ^/.well-known/apple-app-site-association$ /content/dam/project_name/well-known/apple-app-site-association [PT,L]

 

 

After this it will work.

Hope this help! 🙂

 

@veerareddyc1015Issue resolved or if you stuck then let me know?

1 reply

iamnjain
New Participant
August 24, 2023

Hello @veerareddyc1015 

 

We have recently enabled https://domain.com/.well-known/assetlink.json file to enable Universal Links between a website and app. We hosted assetlink.json file on AEM and used Dispatcher rewrites to handle redirection.

 

Are you looking for something like this with "security.txt" file?

veerareddyc1015
New Participant
August 24, 2023

Hi @iamnjain ,

 

I am looking for the same with "security.txt",

Can you please help me with the dispatcher rewrite rules if possible.

I have tried with below but it's blocking in dispatcher.

 

Thanks & Regards

Veera

iamnjain
iamnjainAccepted solution
New Participant
August 24, 2023

Hi Veera,

 

You need to do two things,

1. Allow specific paths in filters.any file in dispatcher. I have allowed like below

 

/0106 { /type "allow" /method "GET" /url "*/.well-known/apple-app-site-association"} /0107 { /type "allow" /method "GET" /url "*/well-known/apple-app-site-association"}

 

2. Add rewrites in rewrites.rules file to redirect incoming request from /.well-known/security.txt to your respective path.

For my project, I added below rule

 

RewriteRule ^/.well-known/apple-app-site-association$ /content/dam/project_name/well-known/apple-app-site-association [PT,L]

 

 

After this it will work.

Hope this help! 🙂

 

@veerareddyc1015Issue resolved or if you stuck then let me know?