[
https://issues.apache.org/jira/browse/BROOKLYN-293?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15320320#comment-15320320
]
ASF GitHub Bot commented on BROOKLYN-293:
-----------------------------------------
Github user bostko commented on the issue:
https://github.com/apache/brooklyn-server/pull/188
@aledsage I tested launching `org.apache.brooklyn.cli.Main` with my IDE and
indeed with the change brooklyn doesn't list `/assets`
> Web-console should not allow directory listing
> ----------------------------------------------
>
> Key: BROOKLYN-293
> URL: https://issues.apache.org/jira/browse/BROOKLYN-293
> Project: Brooklyn
> Issue Type: Improvement
> Affects Versions: 0.9.0
> Reporter: Aled Sage
> Priority: Minor
>
> A customer's security audit spotted that directory browsing is enabled in the
> Brooklyn web-console. For example, http://localhost:8081/assets.
> In general, it is more secure to forbid directory listing.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
