QuestionQ2

VerifiedSecure Deployment and Maintenance

Alice, a security engineer, was conducting security testing on the application. He discovered that users can see the website structure and file names. Under standard security practices, this can create a serious security risk because attackers may access hidden script files in the directory. Which of the following will mitigate this security risk?

Explanation

Directory browsing should be disabled to prevent unauthenticated users from enumerating directory contents and file names. The servlet DefaultServlet uses the listings initialization parameter; a value of false prevents directory listings from being displayed.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!