[
https://issues.apache.org/jira/browse/BROOKLYN-293?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15320319#comment-15320319
]
ASF GitHub Bot commented on BROOKLYN-293:
-----------------------------------------
Github user sjcorbett commented on the issue:
https://github.com/apache/brooklyn-server/pull/188
Looks good to me. The parameter is as described in [Jetty's
documentation](http://download.eclipse.org/jetty/stable-9/apidocs/org/eclipse/jetty/servlet/DefaultServlet.html).
Will wait for Jenkins and merge (or re-test and merge!).
> Web-console should not allow directory listing
> ----------------------------------------------
>
> Key: BROOKLYN-293
> URL: https://issues.apache.org/jira/browse/BROOKLYN-293
> Project: Brooklyn
> Issue Type: Improvement
> Affects Versions: 0.9.0
> Reporter: Aled Sage
> Priority: Minor
>
> A customer's security audit spotted that directory browsing is enabled in the
> Brooklyn web-console. For example, http://localhost:8081/assets.
> In general, it is more secure to forbid directory listing.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
