I have a small Flask app that I managed to get running using apache2 and mod-wsgi. I set it up to run on a subdomain like test.example.com The app is in /var/www/flasktest .
Now if I go to example.com/flasktest/test.wsgi it returns the contents of the file - the same happens with .py files. If I go to test.example.com the website works.
How do I prevent py, wsgi ..etc files from being up for download. I would love to only allow *.css, *.js, ..etc