[unsane1]

Goodness, I hope all the people using SVN to deploy are making sure that they're taking care of the .svn directories and the resulting security issues.

[JonnieCache]

I assume they're `svn export`ing rather than `svn checkout`ing.

[unsane1]

Yet I see at least one reference to `svn update`

I'm scurred.

[gregjor]

Read the whole comment. It's easy to configure Apache or whatever HTTP server you're using to not serve anything in .svn directories. Duh.

[bradleyland]

Don't be afraid, just configure your Apache server correctly and you'll be fine.

One-liner if you're already using rewrite:

RewriteRule ^(./)?.svn/ - [F,L]

If you're not:

<Directorymatch "^/./.svn/"> Order deny,allow Deny from all </Directorymatch>