Exhibiting everything is prohibited, but in another browser under an anonymous file the file is still loaded.

What's wrong? Only this is not enough, where else to make bans?

enter image description here

    2 answers 2

    1. The html file is static, because the access rights to it do not work, it does not connect the core bitrix. Therefore, it is necessary to prohibit such a file in htaccess

      Most likely the fact is that you are using an html file. Those. nginx gives it as an old man bypassing Apache. You can determine who is sending content to the HTTP response header. Or just do the same for index.php. If the theory is confirmed, then the ban to the file should be done at the level of nginx.