Limit exposure to sensitive directories and files
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、
お気軽にご連絡ください。
ID: javascript-express/access-restriction
Language: JavaScript
Severity: Warning
Category: Security
CWE: 548
Description
Exposing a directory listing could present an attacker an opportunity to access source code or other sensitive data through a file structure exploit. Restricting access to non-sensitive directories and files is strongly suggested.
Learn More
Non-Compliant Code Examples
const express = require("express")
const serveIndex = require("serve-index")
const app = express()
app.use(serveIndex())
Compliant Code Examples
const express = require("express")
const serveIndex = require("serve-index")
const app = express()
app.use(serveIndex("/public"))
