Make .git directory web inaccessible

by

Put this in an .htaccess file at the root of your web server:

RedirectMatch 404 /\.git

This solution is robust and secure: it

  • works for all .git directories in your site, even if there are more than one,
  • also hides other Git files like .gitignore and .gitmodules
  • works even for newly-added .git directories, and
  • doesn’t even give away the fact that the directories exist.

More Related Contents:

  1. Setting up Git Server on Windows With git-http-backend.exe
  2. What’s the difference between HEAD^ and HEAD~ in Git?
  3. What does FETCH_HEAD in Git mean?
  4. Permission denied (publickey) when deploying heroku code. fatal: The remote end hung up unexpectedly
  5. Can I get a list of files marked –assume-unchanged?
  6. How to checkout in Git by date?
  7. Difference between Git and GitHub
  8. Using conditional configuration files with Git
  9. How to fix committing to the wrong Git branch?
  10. List files in local git repo?
  11. What is the Sign Off feature in Git for?
  12. How to make Git pull use rebase by default for all my repositories?
  13. How do I get bash completion to work with aliases?
  14. Git push rejected “non-fast-forward”
  15. Fix msysGit Portable $HOME location
  16. How do you take a git diff file, and apply it to a local branch that is a copy of the same repository?
  17. Find unmerged Git branches?
  18. Git submodule on remote bare
  19. After git push heroku – uploaded files on Heroku are lost
  20. `git fetch` a remote branch
  21. Ignore *all* whitespace changes with git-diff between commits
  22. What is difference between ‘git reset –hard HEAD~1’ and ‘git reset –soft HEAD~1’?
  23. How to make git diff –ignore-space-change the default
  24. How can I mark a committed file as read-only in Git?
  25. How to create a new (and empty!) “root” branch?
  26. How to check if remote branch exists on a given remote repository?
  27. How to list files ignored with ‘skip-worktree’
  28. Calling ‘git pull’ from a git post-update hook
  29. How do I show my global Git configuration?
  30. Why does ‘git commit’ not save my changes?

Leave a Comment