Knowledge Base - FAQ
Question: How do I disable directory listings in Tomcat?If directory browsing is enabled, then anyone can see the contents of directories that do not contain an index.html or index.jsp file. To disable directory browsing, edit the file ~/conf/web.xml. Change the value of the parameter "listings" in the servlet named "default" from "true" to "false". Don't forget to restart Tomcat after making the change!
Last Modified: Jun 21, 2005