So this does the opposite of the above? Is that if somebody hacks the URL manually? Because I don't see how you'd get those URLs linked from anywhere. It sounds like too much maintenance to me: Its already missing the "master" branch as an exclusion factor, and we'll need to remember to add any future release, which we'll very likely forget. Also: RewriteCond just applies to the immediate next RewriteRule.