MAGETWO-52867: [APPSEC-1446] Sensitive server information disclosure upon specific URL requests

Author: dsikkema-magento

Diff for: pub/.htaccess

@@ -197,6 +197,10 @@
         deny from all
     </Files>
 
+# For 404s and 403s that aren't handled by the application, show plain 404 response
+ErrorDocument 404 /errors/404.php
+ErrorDocument 403 /errors/404.php
+
 ############################################
 ## If running in cluster environment, uncomment this
 ## http://developer.yahoo.com/performance/rules.html#etags