[TASK] Protect configuration of extensions

Similar to protecting the private resources, the configuration
of an extension should be protected as well.

Change-Id: Ib68cb77ea21e8ec192927d1c9c62a30c1bb7103f
Releases: master, 6.2
Resolves: #66573
Reviewed-on: http://review.typo3.org/38921


Reviewed-by: Markus Klein <klein.t3@reelworx.at>
Reviewed-by: Stefan Froemken <froemken@gmail.com>
Tested-by: Stefan Froemken <froemken@gmail.com>
Reviewed-by: Jan Kiesewetter <jan@t3easy.de>
Tested-by: Jan Kiesewetter <jan@t3easy.de>
Reviewed-by: Andreas Fernandez <andreas.fernandez@aspedia.de>
Tested-by: Markus Klein <klein.t3@reelworx.at>

_.htaccess

@@ -106,9 +106,11 @@ RewriteRule ^(.+)\.(\d+)\.(php|js|css|png|jpg|gif|gzip)$ $1.$3 [L]
 # For httpd.conf, use these lines instead of the next ones:
 # RewriteRule ^/TYPO3root/fileadmin/(.*/)?_recycler_/ - [F]
 # RewriteRule ^/TYPO3root/fileadmin/templates/.*(\.txt|\.ts)$ - [F]
+# RewriteRule ^/TYPO3root/typo3conf/ext/[^/]+/Configuration/ - [F]
 # RewriteRule ^/TYPO3root/typo3conf/ext/[^/]+/Resources/Private/ - [F]
 RewriteRule ^fileadmin/(.*/)?_recycler_/ - [F]
 RewriteRule ^fileadmin/templates/.*(\.txt|\.ts)$ - [F]
+RewriteRule ^typo3conf/ext/[^/]+/Configuration/ - [F]
 RewriteRule ^typo3conf/ext/[^/]+/Resources/Private/ - [F]
 
 # Stop rewrite processing, if we are in the typo3/ directory.