myron/do-server-config
1
0
Fork 0
mirror of https://github.com/myronblair/do-server-config synced 2026-07-28 13:32:58 -05:00
Code Issues Packages Projects Releases Wiki Activity

[orbis] Weekly backup 2026-07-07 — 318 files changed, 48597 insertions(+), 7 deletions(-)

Browse Source
This commit is contained in:
DO Server Backup
2026-07-07 15:58:55 +00:00
parent 5fda5a1536
commit fe18800d18
318 changed files with 48597 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
sites/orbishosting.com/public_html/.htaccess
+14
View File
@@ -0,0 +1,14 @@
# Deny public access to the git working directory and legacy/unused
# server directories that live inside the web docroot but were never
# meant to be reachable over HTTP.
#
# Found during security review (2026-07): https://orbishosting.com/.git/config
# was directly downloadable and exposed a live GitHub PAT in the remote URL.
# That token must also be revoked/rotated on GitHub — this file only closes
# the HTTP exposure, it does not invalidate the leaked credential.
RewriteEngine On
RewriteRule ^\.git(/|$) - [F,L]
RewriteRule ^legacy(/|$) - [F,L]
RewriteRule ^dist(/|$) - [F,L]
RewriteRule ^extensions(/|$) - [F,L]
RewriteRule ^config(/|$) - [F,L]