Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Disable directory listing of admin console

Description

Openfire, by default, will show a directory listing when opening something like http://localhost:9090/images/

This gets flagged by vulnerability scanners.

No directory content should be shown.

Environment

None

Activity

Show:

Guus der Kinderen September 25, 2024 at 6:19 PM

A work-around for this issue might be to add the following snippets to web.xml files found in an installation:

Fixed

Details

Assignee

Reporter

Ignite Forum URL

Components

Fix versions

Priority

Created September 25, 2024 at 6:11 PM
Updated October 11, 2024 at 2:01 PM
Resolved October 11, 2024 at 2:01 PM