Correct regular expression

[doublecompile]

This commit should resolve #568. I've taken the regular expression directly from https://github.com/drupal/drupal/blob/038cb48a4a640fd4913e0b6284f60f6fe82fc9cf/.htaccess#L6

[alessfg]

Thank you!

[codebymikey]

I think this change most likely introduces a regression as the original htaccess rules aren't compatible with Nginx's location block, particularly the use of ^.

Which is what my original commit from #532 aimed to acheive.

@nielstholenaar I'm not particularly sure what #567 aimed to fix as the rules before that commit should be capable of blocking access to /web.config, /composer.json, /composer.lock just fine from doing some tests. If you could provide specific examples of URL paths which are failing to match, then that might be a lot more helpful.

[nielstholenaar]

Hi @codebymikey,
We had issues with those file being able to be viewed and not be blocked by using the old regex.
I cannot remember the specific site, so sadly I cannot post any URL paths. But it looked like the regex was invalid because it was solved by changing it.