SVN users, secure your web site!
Tuesday, September 29th, 2009After reading this article I found I host one of the site affected by this security issue.
I.e. if your website has “.svn” folders (because you’ve forgot to exclude them from the zip or whatever) than your source code may be exposed to the anonymous users.
Two possible (and simple) solutions:
- Exclude “.svn” folders when publishing/deploying
- Add this to your Apache2 website configuration
<Directory ~ ".*\.svn"> Order allow,deny Deny from all Satisfy All </Directory>