Oh. Now we're blacklisting.
If you are going to use this solution, you are better off blacklisting all dotfiles except .htaccess, assuming you allow it.