Naked / Exposed .git

Exposed .git

A deploy shipped the version-control metadata into the web root. One request to the config a git client reads first is all it takes.

Hint (nudge only): A repository keeps a small text config at a well-known path under its metadata folder. What does a fresh clone fetch before anything else?