I recently ran a magereport.com scan on one of our magento sites and it reported a cacheleak vulnerability.
In my var folder, there is an .htaccess file but it is not activating and the vulnerability is still reported.
I am running the following:
Magento 22.214.171.124 CentOS release 6.3 (Final) PHP 5.3.3 FCGI Apache 2.2.15
Contents of my var/.htaccess folder is:
Order Deny,Allow Deny from all
Can someone shed some light why I am still able to access folders in my var folder?