search

tobychui / zoraxy

A general purpose HTTP reverse proxy and forwarding tool. Now written in Go!
https://zoraxy.aroz.org
GNU Affero General Public License v3.0
3.02k stars 184 forks source link

[BUG] Static webserver directory listing cannot be disabled persistently #339

Open jwgn opened 3 weeks ago

jwgn commented 3 weeks ago

Describe the bug Enable Directory listing setting does not stay off. It keeps getting reactivated after some time or after a process restart / reboot.

To Reproduce Steps to reproduce the behavior:

  1. Go to Static Web Server
  2. Disable the Enable Directory listing switch
  3. Switch gets reactivated after some time

Expected behavior Setting should be persistent.

Host Environment (please complete the following information):

klisza1993 commented 4 days ago

That is true, and it was vulnerable for path traversal - already fixed