4 ms·

If the .git folder is exposed, you can download it, then do "git checkout" in that folder and get the full working copy.

• Spivak 9y ago
  Just like anyone can go to Github, Gitlab, Bitbucket, etc. and get a full working copy. If your code is public then what does it matter? If it's not then you should be protecting it like any other sensitive information.
  • partycoder 9y ago
    You make the assumption that code is public and in a git hosted service. Neither of those are necessarily the case. You can unintentionally expose your repository by deploying .git by mistake.
  • vultour 9y ago
    Who said the code was public?