expose --file-only option to disable dir listing

novnc / websockify

Websockify is a WebSocket to TCP proxy/bridge. This allows a browser to connect to any application/server/service.

GNU Lesser General Public License v3.0

3.88k stars 768 forks source link

expose --file-only option to disable dir listing #536

Closed msays2000 closed 1 year ago

msays2000 commented 1 year ago

some security scanning tools complain that exposing a directory for directory listing is a security violation. A option already exists to disable dir listing but it is not exposed to be used.

This PR simply exposes that option.

msays2000 commented 1 year ago

@CendioOssman please review this to expose a flag, this has widely been asked in many online forums example: https://groups.google.com/g/novnc/c/XVnJ7A0Kd5U

https://github.com/novnc/noVNC/issues/294

CendioOssman commented 1 year ago

Great, thanks!