Site's settings file return blank screen
This is the intended functionality - your web/server user should be able to access the file and serve it over http but the file by itself doesn't do anything unless its included in the rest of the Drupal bootstrap. 

The core concern of this security notice  is that there is a vulnerability if the settings.php file is writable or owned by the webserver.