In htaccess allowed downloading of hidden files - instead of forbidding all files and dirs begining with a dot, there are now only forbidden .htacces, .htpasswd and .filemanager.ini files.