OWASPASVS 5.0 requirement

ASVS-V13.4.1 The application is deployed either without any source control metadata, including the .git or .svn folders, or in a way that these folders…

L1 Published 2025 Official page ↗

Standard: OWASP ASVS 5.0
Chapter: V13 Configuration
Section: V13.4 Unintended Information Leakage
Level: L1 (requirement applies from this verification level up)

Requirement

Verify that the application is deployed either without any source control metadata, including the .git or .svn folders, or in a way that these folders are inaccessible both externally and to the application itself.