restrict access to public files only

use mod_rewrite to pretend theese files are not existend for security purposes
blocked 3rdparty instead of l10n
Merge pull request #12477 from rjaeckel/master

restrict access to public files only