# The updater's working folder: the downloaded package, its step state, the
# rollback copy of the previous version and the in-progress marker. None of it
# is meant for a browser, so this denies ALL direct access.
<IfModule mod_authz_core.c>
    # Apache 2.4+
    Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
    # Apache 2.2
    Order allow,deny
    Deny from all
</IfModule>
