From a9ed4e45ca8a8c886f1dec5140e4c2a935972e41 Mon Sep 17 00:00:00 2001
From: Lukas Bestle <lukas@getkirby.com>
Date: Thu, 15 Sep 2022 21:55:43 +0200
Subject: [PATCH] Only pass Authorization header to PHP if set

https://github.com/getkirby/kirby/issues/4634#issuecomment-1241775782
---
 .htaccess | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.htaccess b/.htaccess
index 370133c..06584dc 100644
--- a/.htaccess
+++ b/.htaccess
@@ -1,5 +1,5 @@
 # Kirby .htaccess
-# revision 2020-06-15
+# revision 2022-09-15
 
 # rewrite rules
 <IfModule mod_rewrite.c>
@@ -43,7 +43,7 @@ RewriteRule ^(.*) index.php [L]
 </IfModule>
 
 # pass the Authorization header to PHP
-SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1
+SetEnvIf Authorization "(.+)" HTTP_AUTHORIZATION=$1
 
 # compress text file responses
 <IfModule mod_deflate.c>