Some words from PortSwigger access control labs.

http.txt

@@ -1,3 +1,25 @@
+._darcs
+.bzr
+.chef
+.chef/credentials
+.config
+.env
+.git
+.hg
+.kube
+.kube/config
+.secret
+.secrets
+.svn
+.terraform
+.well-known
+.well-known/jwks.json
+.well-known/oauth-authorization-server
+.well-known/openid-configuration
+/.well-known/openid-configuration
+/api/v1/config
+AppConfig
+BitKeeper
 admin
 airflow.cfg
 ajax
@@ -6,44 +28,33 @@ android_manifest.json
 api
 api-docs
 api/v1
-/api/v1/config
 api/v2/users/me
 api/v3/
+asset-manifest.json
 assets
 auth
 authentication
 authorization
-BitKeeper
-.bzr
 callback
-.chef
-.chef/credentials
-.config
 config
 config/credentials.yml.enc
 config/slack.yml
 core
 credentials.yml
-._darcs
 debug
 debugger
 docs
-.env
 fixtures3.json
 fixtures3.yaml
-.git
 grafana
 graphiql
 graphql
 habitat/plan.sh
 header
 health
-.hg
 js
 jwks
 jwks.json
-.kube
-.kube/config
 kube_config_cluster.yaml
 kustomization.yaml
 login
@@ -60,24 +71,21 @@ password.txt
 php.ini
 prometheus.yml
 registration
+robots.txt
 script
-.secret
-.secrets
 secret.yaml
 settings
 spec3.json
 spec3.yaml
 static
-.svn
 swagger
 swagger.json
-.terraform
 user
 user-info
-username.txt
 user-state
 user/v1/profile
 user/v1/session
+username.txt
 uwsgi.ini
 v1
 v1/api
@@ -88,10 +96,3 @@ v3
 v4
 v5
 version
-.well-known
-.well-known/jwks.json
-.well-known/oauth-authorization-server
-.well-known/openid-configuration
-/.well-known/openid-configuration
-AppConfig
-asset-manifest.json