diff -r 2815e71c65fb -r cdf0cb7bf073 cms/drupal/.htaccess
--- a/cms/drupal/.htaccess	Mon Mar 19 15:45:08 2018 +0100
+++ b/cms/drupal/.htaccess	Mon Mar 19 16:00:44 2018 +0100
@@ -152,3 +152,8 @@
   # Disable content sniffing, since it's an attack vector.
   Header always set X-Content-Type-Options nosniff
 </IfModule>
+
+<Files "xmlrpc.php">
+  Order Deny,Allow
+  Deny from all
+</Files>
\ No newline at end of file