Issue #2768921 by izmeez, mcdruid, Pere Orga, jfhovinne, alexpott, Fabianx, David_Rothstein, coltrane, dawehner, catch, david_garcia, xjm, pwolanin, greggles, larowlan, mlhess: Backport server configuration code from SA-CORE-2016-003 to Drupal 7

Issue #3047412 by mcdruid, Chi, beckydev, DKAN, alexpott, sammuell, rabbitlair, longwave, greggles, interX: Block web.config in .htaccess (and vice-versa)

Issue #2392153 by mparker17, hussainweb, chris.smith, alexpott, dawehner: Disallow composer.json and composer.lock from being indexed