[
https://issues.apache.org/jira/browse/BROOKLYN-293?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15320374#comment-15320374
]
ASF GitHub Bot commented on BROOKLYN-293:
-----------------------------------------
Github user aledsage commented on the issue:
https://github.com/apache/brooklyn-server/pull/188
Thanks all. Jenkins built successfully, so am merging now.
> Web-console should not allow directory listing
> ----------------------------------------------
>
> Key: BROOKLYN-293
> URL: https://issues.apache.org/jira/browse/BROOKLYN-293
> Project: Brooklyn
> Issue Type: Improvement
> Affects Versions: 0.9.0
> Reporter: Aled Sage
> Priority: Minor
>
> A customer's security audit spotted that directory browsing is enabled in the
> Brooklyn web-console. For example, http://localhost:8081/assets.
> In general, it is more secure to forbid directory listing.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
