# Is it safe to include full filesystem paths in files published on Github?

Some of the configuration files I mean to publish as part of a Github project include full filesystem paths (including username login) in my localhost. Does this pose as a possible security vulnerability?

For example in a configuration file I may have

<script>window.MathJax || document.write('<script type="text/javascript" src="/home/myspecialusername/projects/MathJax/MathJax.js?config=TeX-AMS_HTML-full"><\/script>')</script>


(In this example the browser is instructed to use a local copy of MathJax if offline.)

• why not use relative paths or shortcuts to things like ~ for home? – schroeder Feb 13 '17 at 18:43
• @schroeder Sure. But why is this better from a security point of view? – user68297 Feb 13 '17 at 18:50
• Because you expose the exact paths and usernames of your local machine. It's a small thing, but it represents a 'leakage'. – schroeder Feb 13 '17 at 21:41