Refuse to upload .htaccess or .htpasswd files
Refuse to upload .htaccess or .htpasswd files

...at least to the "root" directory of the upload.

We don't care about uploading .htaccess/.htpasswd to subdirectories
because, if configured as described in README.md, Apache won't read
them. Apache will probably still refuse to serve them, but as long
as it doesn't read them that's not really a problem for us.

fxkr/share-via-ssh