gollum/gollum · warning

Accessing this resource is not allowed.

Error message

Accessing this resource is not allowed.

What it means

Gollum stores page-rename redirects in the repo-root file .redirects.gollum and deliberately refuses web reads of it: GET /.redirects.gollum is matched by a dedicated route that halts 403 'Accessing this resource is not allowed.', ahead of the catch-all get '/*'. This keeps clients from enumerating the redirect rules.

Source

Thrown at lib/gollum/app.rb:606

      path      = wikip.path
      if page = wikip.page
        @page    = page
        @name    = name
        @content = page.formatted_data
        @version = version
        @historical = true
        @bar_side = wikip.wiki.bar_side
        @navbar   = true
        mustache :page
      elsif file = wikip.wiki.file(file_path, version, true)
        show_file(file)
      else
        halt 404
      end
    end

    get '/\.redirects\.gollum' do
      forbid('Accessing this resource is not allowed.')
    end

    get '/*' do
      fullpath = params[:splat].first
      if params.has_key?("raw")
        show_raw_page(fullpath)
      else
        show_page_or_file(fullpath)
      end
    end

    private

    def redirect_to(redirect_path, fullpath, query_params)
        redirect to("#{encodeURI(redirect_path)}?redirected_from=#{encodeURI(fullpath)}#{query_params}")
    end

    def page_does_not_exist()

View on GitHub (pinned to d00fefc89b)

Solutions

1. Read the file via git: git show HEAD:.redirects.gollum in a clone
2. Edit redirect rules only via git commit, never through HTTP
3. Expect 403 for this URL in monitoring/health checks - it is by design, not a misconfiguration

# /\.redirects\.gollum is always 403 over HTTP - read it via git instead:
# git show HEAD:.redirects.gollum

When it happens

Trigger: Requesting GET /.redirects.gollum directly in a browser, or crawlers/scanners following repo file listings probing for dotfiles.

Common situations: Users curious how gollum redirects work after renaming pages; security scans flagging then fetching the dotfile; scripts assuming every repo file is web-readable.

Related errors

• Changing this resource is not allowed.
• Forbidden. This wiki is set to no-edit mode.
• The file you are trying to upload already exists.
• You are trying to save this page under a path (#{page.escape
• The patch does not apply.

AI-assisted analysis of gollum/gollum@d00fefc89b (2026-08-21). Data as JSON: /api/errors/8426592cc2270e74. Report an issue: GitHub.