4.8 URL Path Blocking
Last updated
Last updated
The Block URL Path module allows you to block access to specific URL paths on your site. Any incoming HTTP request that matches the defined path will be instantly blocked — regardless of its headers, parameters, or IP address.
You provide a full or partial URL path, such as:
/admin
/private/data.json
https://yourdomain.com/debug
Once saved, all requests to that exact path will be blocked before reaching your backend.
Go to Security Rules > URL Path Blocking
Click Block URL Path
Enter the full or partial path to be blocked
Click Block
The rule is instantly enforced
Block access to /admin
or /debug
pages
Block file downloads from /backup.zip
Block access to hidden or deprecated directories
Blocking unused or sensitive paths helps protect:
Admin panels
Development environments
Exposed data files
Misconfigured routes
This is a quick and effective way to reduce your visible attack surface.
🎯 Block URL Path offers an easy way to disable public access to risky paths without needing to change application code or server configurations.