Need Help Adjusting Security Settings – Can’t Access editimage.html

Hi folks,

In a continuing effort to better secure my WP blogsite, I recently added .htaccess files to my main directories.

However, when I try to edit an image I insert into a draft post, I get the following error:
———–
Forbidden
You don’t have permission to access /blog/wp-includes/js/tinymce/plugins/wpeditimage/editimage.html on this server.
————

OK, I think, this is probably good. To my newbie eyes, I assume the problem is with my wp-include’s .htaccess file, which I set to the following, based on an article I read:
————-
Order Allow,Deny
Deny from all
<Files ~ “\.(css|jpe?g|png|gif|js)$”>
Allow from all
</Files>
————-

Since html files are not listed as part of the allowed file types, I assume this is why I no longer can edit images? If so, should I simply add “|html” after “|js” ?

The bigger question here is, am I circumventing the point of having the .htaccess by allowing .html access? What’s the recommended means to keep the .htaccess locked down, but allow me to use the right files when I need to?

Thanks!