Block .env and config-file probes in Express and Fastify
Open the 404 log of any public API and you will find requests for files that were never meant to be served: /.env , /.git/config , /.aws/credentials . The list has grown. Scanners now ask for the config files of AI coding tools too, because those files hold API keys and MCP server tokens. This post…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-11-06 12:18 · DEV Community — AI
Block .env and config-file probes in Express and Fastify