I setup an NGINX webserver and use svn to manage project folder. Nessus found the weakness:
Configure permissions for the affected
web server to deny access to the
'.svn' directory.
How do I block access to the .svn
directory? It seems that svn export
is the more preferable way to checkout on the webserver, but it easier to me to use svn up
.
finally I found the right way to make it in nginx. Add to nginx.conf this lines in server {} definition:
location ~ /.svn/ {
deny all;
}
That's all!
Put the following in a file called ".htaccess" (if you're running Apache):
<FilesMatch "^\.svn">
Deny from all
</FilesMatch>
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With