5 ms·
Would it be safer to not put .git within the reach of the webserver, and separate the development path from the production host path?
by bsg75 11y ago
Would it be safer to not put .git within the reach of the webserver, and separate the development path from the production host path?
- bbcbasic 11y agoIt certainly would, however like another comment I replied to ITT security doesn't have to be either-or it can be "do all the secure things". I.e. * No secrets in your repo * Only copy to the server what you need (and automate this) * Add conditions to your web server to not serve up .git, in-case the previous two checks failed. When working in teams I think having additional checks and balances and not one 'perfect solution' is vital.
- danieltillett 11y agoExtremely good point - we should always aim for security in depth and especially don’t rely on people not doing stupid things, because if it is possible then someone will at some point.