Edson Carlos Ericksson Richter wrote:
> Sometimes this feature is a need. Sometimes it's just a security fault.
> AFAIK, directory listing is enabled by default. How could I disable this?
I agree it should be disabled, but changing default value in GlassFish
out of the box configuration is not easy ;-) Just think about access
logging still enabled :-).
Edit ${glassfish.home}/domains/domain1/config/default-web.xml and change:
<servlet>
<servlet-name>default</servlet-name>
<servlet-class>org.apache.catalina.servlets.DefaultServlet</servlet-class>
<init-param>
<param-name>debug</param-name>
<param-value>0</param-value>
</init-param>
<init-param>
<param-name>listings</param-name>
<param-value>true</param-value>
</init-param>
<load-on-startup>1</load-on-startup>
</servlet>
Set listing to false.
-- Jeanfrancois
>
> Tkx,
>
> Edson Richter
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net