Re:Basic Flaw Reveals Source Code to 3,300 Popular Websites
by gaffe on Wednesday September 23, 2009 @07:06PM
(#840302)
If there are .svn directories still present, it's likely that they just copied a working copy to their web server. You're supposed to use "svn export" to create a "production" version without the .svn directories. Or just delete them. Either way, this is really VCS misuse more than anything else.
[ Parent
| on HN ]
Re:Basic Flaw Reveals Source Code to 3,300 Popular Websites
by zacharydanger on Wednesday September 23, 2009 @07:16PM
(#840319)
Using subversion for deployment is a common practice. They should be blocking access to the .svn directories via web server configuration.