Is it a good idea to preventively disable (public) access to certain filetypes (by extension) and/or by filenames:
- in the server configuration (in case of a shared hosting server) or,
- as a rewrite rule for a website or web application?
For example filenames like:
Or the following file extensions in combination with above filenames:
rtf and possibly more and
without any file extension.
And denying access to specific file extensions completely like:
Is it a good idea to do so? In order to prevent information leakage when those file are (accidentally) moved into a public folder.