Fixing Issue #367: Start script could expose sensitive information

script/server

@@ -60,7 +60,7 @@ fi
 
 # Force AGPL
 if [ -w public -a ! -e  public/source.tar.gz ]; then
-    tar czf public/source.tar.gz  --exclude='source.tar.gz' -X .gitignore *
+    tar czf public/source.tar.gz  `git ls-tree -r master | awk '{print $4}'`
 fi
 if [ ! -e public/source.tar.gz ]; then
     echo "Error: Can't find, or even create, public/source.tar.gz. Exiting" >&2