Skip to content

fix/security: http.FileServer lists directory #2

Description

@roshnet

Using http.FileServer works well, but reveals directory content if the URL is tampered with.

Possible options

  • Maybe try http.ServeFile instead (given it's dangerous theoretically)?
  • Write own custom handler to serve static files?
  • IDK!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions