3 ms·
Revealing source code should not be a security problem. Open source is not less secure than closed source. If enough non-evil eye pairs read it and responsibly
by usr1106 8y ago
Revealing source code should not be a security problem. Open source is not less secure than closed source. If enough non-evil eye pairs read it and responsibly disclose their findings at least.
However, storing database passwords or password hashes in git (at least inside the same repo) is a major design flaw.
- libdjml 8y agoI highly doubt this is a off the shelf Wordpress install. In fact, a standard WP is not > 1gb of data, which the post describes. There will be a massive amount of customization, so revealing source code probably is a security risk. I’m willing to bet a competent code auditor could find secondary vulns in that code.
- Domenic_S 8y agoThe resources folder containing images/etc was probably checked into git. Happens more than you might think...