Aled Sage created BROOKLYN-293:
----------------------------------

             Summary: Web-console should not allow directory listing
                 Key: BROOKLYN-293
                 URL: https://issues.apache.org/jira/browse/BROOKLYN-293
             Project: Brooklyn
          Issue Type: Improvement
    Affects Versions: 0.9.0
            Reporter: Aled Sage
            Priority: Minor


A customer's security audit spotted that directory browsing is enabled in the 
Brooklyn web-console. For example, http://localhost:8081/assets.

In general, it is more secure to forbid directory listing.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to