The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65225c4d074b
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://git.sr.ht/~sircmpwn/baremessages.org fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 46.23.81.157:443 ยท baremessages.org
2026-01-23 01:45
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Request-Methods: GET, HEAD, OPTIONS
Content-Length: 4764
Content-Security-Policy: default-src 'self' data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; worker-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; frame-src https:; img-src data: https:; media-src https:; object-src 'none'; sandbox allow-downloads allow-forms allow-modals allow-pointer-lock allow-popups allow-presentation allow-same-origin allow-scripts;
Content-Type: text/html; charset=utf-8
Last-Modified: Thu, 24 Jul 2025 08:52:50 GMT
Vary: Accept-Encoding
Date: Fri, 23 Jan 2026 01:45:19 GMT
Connection: close
Page title: BARE Message Encoding
<!doctype html> <html lang="en">
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>BARE Message Encoding</title>
<style>
body {
max-width: 720px;
margin: 0 auto;
font-family: sans-serif;
line-height: 1.3;
}
h3, h4, h5 {
text-align: center;
}
h1 small {
display: block;
font-size: 1rem;
}
pre {
padding: 0.3rem;
max-height: 20rem;
overflow-y: scroll;
border: 1px solid black;
background-color: #f4f4f4;
}
dt {
font-weight: bold;
}
dd {
margin-bottom: 1rem;
}
li {
margin-bottom: 0.5rem;
}
</style>
<h1>
BARE Message Encoding
<small>Binary Application Record Encoding</small>
</h1>
<p>
BARE is a simple binary representation for structured application data.
<p>
<strong>NOTICE</strong>: The BARE encoding is not finalized.
<a href="mailto:~sircmpwn/public-inbox@lists.sr.ht">Feedback is welcome</a>.
<a href="https://datatracker.ietf.org/doc/draft-devault-bare/">draft-devault-bare</a>
has been filed with the IETF as an Internet-Draft and represents the latest
authoritative draft of the specification.
<h2>BARE at a glance</h2>
<ul>
<li>
Messages are encoded in binary and compact in size. Messages do not contain
schema information — they are not self-describing.
</li>
<li>
BARE is optimized for small messages. It is not optimized for encoding
large amounts of data in a single message, or efficiently reading a message
with fields of a fixed size. However, all types are aligned to 8 bits,
which does exchange some space for simplicity.
</li>
<li>
BARE's approach to extensibility is conservative: messages encoded today
will be decodable tomorrow, and vice-versa. But extensibility is still
possible; implementations can choose to decode user-defined types at a
higher level and map them onto arbitrary data types.
</li>
<li>
The specification is likewise conservative. Simple implementations of
message decoders and encoders can be written inside of an afternoon.
</li>
<li>
An optional <abbr title="domain-specific language">DSL</abbr> is provided
to document message schemas and provide a source for code generation.
However, if you prefer, you may also define your schema using the type
system already available in your programming language.
</li>
</ul>
<p>
Here is a sample schema:
<pre>
type PublicKey data[128]
type Time str # ISO 8601
type Department enum {
ACCOUNTING
ADMINISTRATION
CUSTOMER_SERVICE
DEVELOPMENT
# Reserved for the CEO
JSMITH = 99
}
type Address list<str>[4] # street, city, state, country
type Customer struct {
name: str
email: str
address: Address
orders: list<struct {
orderId: i64
quantity: i32
}>
metadata: map<str><data>
}
type Employee struct {
name: str
email: str
address: Address
department: Department
hireDate: Time
publicKey: optional<PublicKey>
metadata: map<str><data>
}
type TerminatedEmployee void
type Person union {Customer | Employee | TerminatedEmployee}
</pre>
<h2>Known implementations</h2>
<dl>
<dt>C</dt>
<dd><a href="https://git.sr.ht/~fsx/cbare">cbare</a></dd>
<dt>Common Lisp</dt>
<dd><a href="https://git.sr.ht/~theothornhill/cl-bare">cl-bare</a></dd>
<dt>Elm</dt>
<dd><a href="https://github.com/miniBill/elm-bare">elm-bare</a></dd>
<dt>Erlang</dt>
<dd><a href="https://hex.pm/packages/bare">bare</a></dd>
<dt>Go</dt>
<dd><a href="https://sr.ht/~sircmpwn/go-bare/">go-bare</a></dd>
<dt>Java</dt>
<dd><a href="https://github.com/nobloat/bare-jvm">bare-jvm</a></dd>
<dt>JavaScript</dt>
<dd><a href="https://git.sr.ht/~kiito/bare-js">bare-js</a></dd>
<dd><a href="https://github.com/bare-ts/bare">bare-ts</a></dd>
<dt>.NET</dt>
<dd><a href="https://gitlab.com/nilshelmig/barenet">BareNET</a></dd>
<dt>OCaml</dt>
<dd><a href="https://github.com/c-cube/bare-ocaml">bare-ocaml</a></dd>
<dt>PHP</dt>
<dd><a href="https://git.sr.ht/~earboxer/bare-mess-php">bar