The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65222902dffe
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@git.sr.ht:~oven/oven.codes fetch = +refs/heads/*:refs/remotes/origin/* [branch "main"] remote = origin merge = refs/heads/main
Open service 46.23.81.157:443 · oven.codes
2026-01-22 18:55
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Request-Methods: GET, HEAD, OPTIONS
Content-Length: 1887
Content-Security-Policy: default-src 'self' data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; worker-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; frame-src https:; img-src data: https:; media-src https:; object-src 'none'; sandbox allow-downloads allow-forms allow-modals allow-pointer-lock allow-popups allow-presentation allow-same-origin allow-scripts;
Content-Type: text/html; charset=utf-8
Last-Modified: Mon, 29 Dec 2025 09:54:22 GMT
Vary: Accept-Encoding
Date: Thu, 22 Jan 2026 18:55:23 GMT
Connection: close
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="stylesheet" href="style.css">
<link href="src/icons/fork-awesome.min.css" rel="stylesheet" />
<!-- Personal Website -->
</head>
<body>
<div class="page-grid">
<div style="height: 100vh; margin-bottom: 5%">
<!--
<div id="navbar">
<a href="index.html" class="navlinks">Home</a>
<a href="blog.html" class="navlinks">Blog</a>
<a href="radio.html" class="navlinks">Radio</a>
<a href="news.html" class="navlinks">News</a>
<a href="music.html" class="navlinks">Music</a>
</div>
-->
<div>
<img class="pfp" src="src/pfp.png" alt="pfp">
<h2 style="display: block; margin: 1vh auto 1vh auto">/home/oven</h2>
</div>
<div class="link-bar">
<a href="mailto:mailbox@oven.codes" class="navlinks icon-btn"><i class="fa fa-2x fa-envelope"></i><br>Email</a>
<a href="https://signal.me/#eu/K9i0X6EncuUPJ+25o3CLSJAj97Y2R0MYNjAG3gmuLwSv0VPX0aFEEpb3/fEKQ1lw" class="navlinks icon-btn"><i class="fa fa-2x fa-signalapp"></i><br>Signal</a>
<a href="https://0ven.bandcamp.com/album/some-demos" class="navlinks icon-btn"><i class="fa fa-2x fa-bandcamp" alt="bandcamp"></i><br>Music</a>
<a href="https://sr.ht/~oven/" class="navlinks icon-btn"><i class="fa fa-2x fa-circle-o"></i><br>Sourcehut</a>
</div>
</div>
</div>
<div id="footer" style="background-color: white;">
<div id="dogpath"><img alt="小狗" src="src/dog.gif"></img></div>
<div style="text-align: center;">
<a href="https://libre.town"><img src="src/libretown.gif" alt="libretown"></a>
<a href="https://wiby.me"><img src="src/wiby.gif" alt="wiby.me"></a>
<img src="src/thevoid.gif" alt="the void">
<img src="src/dark-mode.gif" alt="dark mode">
<img src="src/1080p.gif" alt="1080p">
</div>
</body>
</html>