Hi Admin,
Thank you for the creating and maintaining the open source webpanel project.
Can you please add context in default vhost file that blocks .git directory?
Most of the site owner’s forget to add htaccess rewrite for blocking .git hence their site repo exposed and downloaded by hackers. some times .htacess code reverted due to updates/changes.
Please add below context in vhost template. also you can ask the community to other common context like this.
context /.git {
type NULL
location $VH_ROOT/public_html/.git
allowBrowse 0
addDefaultCharset off
}