Protect hidden directories (.git, .svn, etc.) in .htaccess. Based off Drupal's commit 84d9994485ae1b0ea84c986ea69475c77a385b2b.