mirror of
https://github.com/myronblair/parkerslingshotrentals
synced 2026-07-27 16:42:32 -05:00
Block public access to .git directory (leaked GitHub PAT, same issue found on sibling sites)
This commit is contained in:
@@ -7,3 +7,8 @@ RewriteEngine On
|
||||
RewriteRule ^db\.php$ - [F,L]
|
||||
RewriteCond %{REQUEST_URI} ^/db\.php$
|
||||
RewriteRule .* - [F,L]
|
||||
|
||||
# .git/ was found directly downloadable (leaked GitHub PAT) - same class of
|
||||
# issue found and fixed on sibling sites this session.
|
||||
RewriteCond %{REQUEST_URI} ^/\.git
|
||||
RewriteRule .* - [F,L]
|
||||
|
||||
Reference in New Issue
Block a user