You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@brooklyn.apache.org by "Aled Sage (JIRA)" <ji...@apache.org> on 2016/06/08 09:45:21 UTC

[jira] [Created] (BROOKLYN-293) Web-console should not allow directory listing

Aled Sage created BROOKLYN-293:
----------------------------------

             Summary: Web-console should not allow directory listing
                 Key: BROOKLYN-293
                 URL: https://issues.apache.org/jira/browse/BROOKLYN-293
             Project: Brooklyn
          Issue Type: Improvement
    Affects Versions: 0.9.0
            Reporter: Aled Sage
            Priority: Minor


A customer's security audit spotted that directory browsing is enabled in the Brooklyn web-console. For example, http://localhost:8081/assets.

In general, it is more secure to forbid directory listing.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)