Hi,
There was a Joomla security bulletin, [20091103] - Core - XML File Read Issue, that suggests as a solution the use of the following rules in the .htaccess file.

Code:

## Deny access to extension xml files (uncomment out to activate)

# 

# Order allow,deny

# Deny from all

# Satisfy all

# 

## End of deny access to extension xml files

Well, what if I want to use an XML sitemap? What is the best workaround for this? Is there a way to specify that the XML deny access rule is ignored for root?
Thanks,
Herb