Yes, we changed the static sites config recently. We encourage users to put secrets in .data, .env, and .git directories, and (generalizing from these) users sometimes also put secrets in other “hidden” directories - directories starting with a period: ‘.’
In order to avoid inadvertently exposing users’ secrets, we changed the static sites hosting defaults to forbid all routes starting with a period: ‘.’
In order to make .well-known
work similar to before this change, put a package.json
file in your project something like this:
{
"scripts": {
"start": "ws --port 3000 --log.format combined --directory . --blacklist '/.env' '/.data' '/.data/(.*)' '/.git' '/.git/(.*)'"
}
}
Hope this helps,
Johnicholas