I setup an NGINX webserver and use svn to manage project folder. Nessus found the weakness:
Configure permissions for the affected
web server to deny access to the
'.svn' directory.
How do I block access to the .svn directory? It seems that svn export is the more preferable way to checkout on the webserver, but it easier to me to use svn up.
finally I found the right way to make it in nginx. Add to nginx.conf this lines in server {} definition:
location ~ /.svn/ {
deny all;
}
That's all!
Put the following in a file called ".htaccess" (if you're running Apache):
<FilesMatch "^\.svn">
Deny from all
</FilesMatch>
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With