Avoiding "Directory Listing For xyz" for a Web Application

[Naresh Shaan]

Hi,

I have been working on jboss for quite some time. the HOT Deployment feature is simple amazing.

But Am worried about one thing. i have a simple web application. with few html , jsp's and servlets.

let us take the following directory structure for my Simple.war application.

Simple.war
|
|--Jsps/One.jsp
|--WEB-INF/


when i point my browser to localhost:8080/Simple/Jsps

i get the Directory listing of files available in my public folder(Files out side WEB-INF) of my application

is there any way to prevent exposing my public files like, html pages, jsp's and few images i have used in my application.

if i give "localhost:8080/Simple/Jsps" then my browser should display some message other than displaying the directory Listings

Thanks!!!

[Jaikiran Pai]

Yes, you can. There's a web.xml under %JBOSS_HOME%\server\default\deploy\jbossweb-tomcatxxx.sar\conf folder. Change the value of the 'listings' param for the default servlet to false:

<servlet>
      <servlet-name>default</servlet-name>
      <servlet-class>org.apache.catalina.servlets.DefaultServlet</servlet-class>
      <init-param>
         <param-name>debug</param-name>
         <param-value>0</param-value>
      </init-param>
      <init-param>
         <param-name>[B]listings[/B]</param-name>
         <param-value>[B]false[/B]</param-value>
      </init-param>
      <load-on-startup>1</load-on-startup>
   </servlet>

By default, the value is true.

[Naresh Shaan]

Thanks A Lot JaiKiran!!!

[naveen gupta]

i had the same problem. But after changing it to false it didn't solved my problem. help me

[Jaikiran Pai]

Where did you change that value? Which file in which folder? Post the contents of the changed file. And did you restart the server after the changes?