search

dvito / govuptime

Is the government up?
http://govuptime.us
6 stars 2 forks source link

Git directory accessible... #12

Closed jasonrojas closed 11 years ago

jasonrojas commented 11 years ago

MacBook-Pro:~ jason$ curl --head http://govuptime.com/.git/config HTTP/1.1 200 OK Server: nginx/1.4.2 Date: Sat, 05 Oct 2013 01:07:07 GMT Content-Type: application/octet-stream Content-Length: 263 Last-Modified: Thu, 03 Oct 2013 05:01:00 GMT Connection: keep-alive ETag: "524cfa0c-107" Accept-Ranges: bytes

MacBook-Pro:~ jason$

You should add something like: location ~ /\.git { deny all; } to NGINX..

GSMcNamara commented 11 years ago

Thank you!!!