search

rebane2001 / lyra.horse

lyra.horse
1 stars 0 forks source link

.git folder accessible on website #1

Open ShaddyDC opened 2 weeks ago

ShaddyDC commented 2 weeks ago

Currently, nginx is configured to allow access to the .git folder on your website: https://lyra.horse/.git/config

If you've got any secrets or something in there, you may risk exposing them, but with a public repo, the risk is probably pretty low anyway. I figured I'll let you know regardless in case it's something you want to fix.

rebane2001 commented 2 weeks ago

Yep, it's not authenticated so you can get the same git folder yourself by just cloning this repo here

ShaddyDC commented 2 weeks ago

I figured, feel free to close then if it's no problem, and thanks for the quick response!