The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652201bb59ca
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://git.sr.ht/~dash/dash.3-2.org fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 46.23.81.157:443 ยท dash.3-2.org
2026-01-23 01:45
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Request-Methods: GET, HEAD, OPTIONS
Content-Length: 1884
Content-Security-Policy: default-src 'self' data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; worker-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; frame-src https:; img-src data: https:; media-src https:; object-src 'none'; sandbox allow-downloads allow-forms allow-modals allow-pointer-lock allow-popups allow-presentation allow-same-origin allow-scripts;
Content-Type: text/html; charset=utf-8
Last-Modified: Sun, 21 Apr 2024 10:52:07 GMT
Vary: Accept-Encoding
Date: Fri, 23 Jan 2026 01:45:50 GMT
Connection: close
<meta charset=utf-8>
<body bgcolor=708090>
<canvas id=a></canvas>
<script>
rotateX = (point, angle) => {
rad = angle * Math.PI / 180
cosa = Math.cos(rad)
sina = Math.sin(rad)
y = point[1] * cosa - point[2] * sina
z = point[1] * sina + point[2] * cosa
return [point[0], y, z]
}
rotateY = (point, angle) => {
rad = angle * Math.PI / 180
cosa = Math.cos(rad)
sina = Math.sin(rad)
z = point[2] * cosa - point[0] * sina
x = point[2] * sina + point[0] * cosa
return [x, point[1], z]
}
rotateZ = (point, angle) => {
rad = angle * Math.PI / 180
cosa = Math.cos(rad)
sina = Math.sin(rad)
x = point[0] * cosa - point[1] * sina
y = point[0] * sina + point[1] * cosa
return [x, y, point[2]]
}
project = (point, win_width, win_height, fov, viewer_distance) => {
factor = fov / (viewer_distance + point[2])
x = point[0] * factor + win_width / 2
y = -point[1] * factor + win_height / 2
return [x, y, 1]
}
init = () => {
c = a.getContext("2d")
vertices = [];
for(i = -3; i <= 3.5; i += .5){
for(j = -3; j <= 3.5; j += .5){
for(k = -3; k <= 3.5; k += .5){
vertices.push([i,j,k]);
}
}
}
angleX = angleY = angleZ = 0
}
run = () => {
t++
a.width = innerWidth - 20
a.height = innerHeight - 20
for(v in vertices){
c.fillStyle = "rgb(" + (32 + vertices[v][0] * 32) + "," + (32 + vertices[v][1] * 32) + "," + (32 + vertices[v][2] * 32) + ")"
r = vertices[v]
r = rotateX(r, angleX)
r = rotateY(r, angleY)
r = rotateZ(r, angleZ)
p = project(r, a.width, a.height, 1024, 15)
x = p[0]
y = p[1]
if(factor > 0){
//c.fillRect(x,y,factor / 80, factor / 80)
c.beginPath()
c.arc(x, y, factor / 40, 0, Math.PI * 2)
c.fill()
c.closePath()
}
}
angleX += 1
angleY += 1
angleZ += 1
requestAnimationFrame(run)
}
init()
t=0
run()
</script>