Project Information
Repository: https://github.com/Steemhunt/web
Platform: https://steemhunt.com
Expected Behaviour
.htaccess file should be a hidden file and on calling it 403 Forbidden should be showed.
Actual Behaviour
.htaccess file is visible publicly.
How to reproduce
Just Visit : https://steemhunt.com/.htaccess
Than .htaccess file can be downloaded and viewed in any text editor
Alternatively in Terminal curl https://steemhunt.com/.htaccess will do the trick.