tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dave Girardin" <unixho...@gmail.com>
Subject Re: disable directory indexing in tomcat?
Date Fri, 13 Jun 2008 22:14:51 GMT
Thanks so much Mark. As you suspected it was disabled so I suspect the
security scan is in error. I'll check the web page to be sure though.

David


On 6/13/08, Mark Thomas <markt@apache.org> wrote:
>
>
> Dave Girardin wrote:
>
>> Does this request make sense? I ask because I can't find any information
>> on
>> directory indexing for Tomcat, although disabling it in Apache is easy
>> enough.
>>
>
> The request makes sense if directory listings are enabled, but they are
> disabled by default.
>
> You need to look for the default servlet configuration (should be in
> conf/web.xml but I would check every web.xml to be sure). There should be
> something like:
>    <servlet>
>        <servlet-name>default</servlet-name>
>
> <servlet-class>org.apache.catalina.servlets.DefaultServlet</servlet-class>
>        <init-param>
>            <param-name>debug</param-name>
>            <param-value>0</param-value>
>        </init-param>
>        <init-param>
>            <param-name>listings</param-name>
>            <param-value>false</param-value>
>        </init-param>
>        <load-on-startup>1</load-on-startup>
>    </servlet>
>
> The listings = false bit is what diables diretory listings.
>
> Mark
>
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message