How to enable or disable Directory Browsing

Overview

Directory browsing lets visitors see a file listing when no default document is present in a directory. It is off by default. Enable it carefully — it can expose files you did not intend to publish.

Steps

  1. Log in to the Everleap Control Panel at cp.everleap.com.
  2. From the top menu click Shared Sites.
  3. On the Shared Cloud Sites Overview page, click Manage next to the applicable site.
Shared Cloud Sites Overview page listing each site with a Manage link
  1. On the Site Overview page, click the SETTINGS tab.
  2. Click the Configuration tab.
Site Settings with the Configuration tab selected
  1. Locate the Directory Browsing dropdown and select Enabled or Disabled.
The Directory Browsing dropdown on the Configuration tab
  1. Click Update Configuration Settings to save.
The Update Configuration Settings button at the bottom of the Configuration tab

Verify It Worked

Browse to a directory that has no default document in it. With directory browsing Enabled you will see a file listing; with it Disabled you will get a 403 error.

Notes

  • This setting applies site-wide.
  • Use it temporarily — for example while debugging a deployment — and set it back to Disabled when you are done.
  • The Configuration tab settings are applied as the default for the site. Your application's web.config can override them, which is how you allow or suppress browsing for specific subdirectories.
  • The Configuration tab also contains ASP.NET Custom Errors and Default Documents.

Related Articles