go for server.xml in tomcat/conf
[...]
<!-- "default" handler - static files and dirs. Set the
"suppress" property to "true" to suppress directory
listings
when no welcome file is present.
NOTE: This setting applies to *all* web applications that
are running in this instance of Tomcat.
-->
<RequestInterceptor
className="org.apache.tomcat.request.StaticInterceptor"
debug="0" suppress="true" />
[...]
Sean Pritchard schrieb:
>
> You can add a welcome file list to your web.xml. I think the following
> syntax is correct...
>
> <welcome-file-list>
> <welcome-file>first.html</wecome-file>
> </welcome-file-list>
>
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, May 10, 2001 10:28 AM
> To: [EMAIL PROTECTED]
> Subject: Re: Security Issue
>
> apache.
>
> use the "deny directory listing" directive - look in the manual FFI.
>
> At 5/10/2001 3:22:42 PM, "Martin Mauri" <[EMAIL PROTECTED]> wrote:
> # Hi users,
> #
> # My apologies if this's an off topic question, but, is there any way with
> # Tomcat to deny users browsing the files when they point to some URL, say:
> # http://myhost:port/report/ will show users a list with the files that are
> # inside the report directory, and though I want them to access an specific
> # file, say http://myhost:port/report/first.html, I don't want them to see
> the
> # hole file list, is it possible with Tomcat or it's an Apache issue?
> #
> # regards.
> #
> # Martin
> #
> # Lic. Martin O. Mauri
> # Profesion + Auge A.F.J.P
> # Parana 666 - Cap. Federal
> # TE: (011) 4373-7786/7 int: 422
> # [EMAIL PROTECTED]
> # www.profesi.com.ar
> #
> Roger