The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522375806f2
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true hooksPath = .husky [remote "origin"] url = https://github.com/umami-software/umami.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master
Open service 46.23.81.157:443 ยท karelvo.com
2026-01-10 11:37
HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Request-Methods: GET, HEAD, OPTIONS Content-Length: 2537 Content-Security-Policy: default-src 'self' data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; worker-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; frame-src https:; img-src data: https:; media-src https:; object-src 'none'; sandbox allow-downloads allow-forms allow-modals allow-pointer-lock allow-popups allow-presentation allow-same-origin allow-scripts; Content-Type: text/html; charset=utf-8 Last-Modified: Sun, 21 Dec 2025 17:48:07 GMT Vary: Accept-Encoding Date: Sat, 10 Jan 2026 11:38:00 GMT Connection: close Page title: karelvo <!doctype html><html lang=en><head><meta name=generator content="Hugo 0.152.2"><meta charset=UTF-8><meta name=viewport content="width=device-width,initial-scale=1"><title>karelvo</title><meta name=description content="karelvo's corner of the web"><link rel=stylesheet href=/css/water.min.css><link rel=stylesheet href=/css/custom.css></head><body><header><div class=container><div class=site-title><a href=/>karelvo</a></div><nav class=site-nav><ul><li><a href=/about/>about</a></li><li><a href=/projects/>projects</a></li></ul></nav></div></header><hr><main><article class=home-content><p>Hi, I am Karel.</p><ul><li>I don’t track you. Learn more <a href=/site>about this site</a>.</li><li>Check out some <a href=/cool-links>cool links</a> I found.</li><li>Take a look at my <a href=/projects>projects</a> while you’re at it.</li><li>This site looks barebones <em>on purpose</em>!</li></ul><h2 id=posts>Posts</h2></article><ul><li><time style=font-family:monospace>2025-12-21</time> <a href=/posts/2025-music/>Music I liked in 2025</a></li><li><time style=font-family:monospace>2025-03-23</time> <a href=/posts/unsupported-printer-mac/>Using an unsupported HP printer on macOS</a></li><li><time style=font-family:monospace>2024-12-31</time> <a href=/posts/2024-music/>Music I liked in 2024</a></li><li><time style=font-family:monospace>2024-04-26</time> <a href=/posts/selfhosting-forms/>Self-hosting forms, the sane way</a></li><li><time style=font-family:monospace>2023-12-31</time> <a href=/posts/2023-music/>Music I liked in 2023</a></li><li><time style=font-family:monospace>2023-02-18</time> <a href=/posts/orgmode/>My simple, effective org mode setup</a></li><li><time style=font-family:monospace>2022-12-31</time> <a href=/posts/2022-music/>Music I liked in 2022</a></li><li><time style=font-family:monospace>2022-03-09</time> <a href=/posts/ttrss/>Guide: TT-RSS on Yunohost on a VPS</a></li><li><time style=font-family:monospace>2022-01-01</time> <a href=/posts/365-things-learned-2021/>365 things I learned in 2021</a></li><li><time style=font-family:monospace>2021-12-31</time> <a href=/posts/2021-music/>Music I liked in 2021</a></li><li><time style=font-family:monospace>2020-12-31</time> <a href=/posts/2020-music/>Music I liked in 2020</a></li></ul></main><footer><div class=container><nav class=site-footer-nav><ul><li><a href=/site>site</a></li><li><a href=/index.xml>rss</a></li><li><a href=https://git.sr.ht/~karelvo/karelvo-com/tree target=_blank rel=noopener>src</a></li></ul></nav></div></footer></html>