myron 8ad58278d0 Block public access to .git directory (leaked live GitHub PAT) ...

The docRoot is the git working tree, so .git/ was directly downloadable
over HTTPS (curl https://orbis.orbishosting.com/.git/config returned 200),
exposing the origin remote URL with an embedded GitHub personal access
token in plaintext. Added a .htaccess denying dotfiles/.git and a
matching OpenLiteSpeed vhost context as defense in depth. The exposed
token should be revoked/rotated on GitHub regardless of this fix.

2026-07-04 14:17:35 -05:00

..

vhost.conf

Block public access to .git directory (leaked live GitHub PAT)

2026-07-04 14:17:35 -05:00

vhost.conf0

Add vhost config

2026-05-25 13:52:17 +00:00

vhost.conf0,v

Add vhost config

2026-05-25 13:52:17 +00:00