You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Bug
The docker image contains and exposes the .git directory. It's generally considered a security flaw to expose it or even have it in the container image.
There is also accessible a .editorconfig
Bug
The docker image contains and exposes the
.git
directory. It's generally considered a security flaw to expose it or even have it in the container image.There is also accessible a
.editorconfig
How to replicate
Expected behavior
Response with 404 http status
Actual behavior
Browser downloads file from
.git
directory.Proposed fix
Add
.git
direcotry and.editorconfig
file to.dockerignore
file to be omitted from the container image build.Affected version
Tested on current
wangqiru/ttrss:latest
(containing Tiny Tiny RSS v23.12-d4ae6c6)The text was updated successfully, but these errors were encountered: