SAP Knowledge Base Article - Preview

2693789 - Fiori URL shows directory listing - security issue - how to disable

Symptom

  • Fiori security concern
  • The source of the Javascript (js) file is shown 
  • A Fiori user can browse the folder structure level in a URL (Fiori app), as well as at system file level (see below)
  • Is there a way to disable "directory listing" in Fiori app or via netweaver gateway?
  • For example (If the user simply adds the URL in the browser they get the directory listing in it):


    Picture:

    fiori_directorylisting.png


Read more...

Environment

SAP Netweaver 7.50

Product

SAP NetWeaver 7.5

Keywords

"Fiori directory","Fiori directory listing","Fiori security issue","how to disable directory browsing Fiori","Fiori URL shows files","Fiori URL Address displays files","How to disable Fiori showing files", "Fiori source seen","Fiori Javascript source shown" , KBA , CA-UI5-DLV , UI5 ABAP delivery tools , BC-JAS-COR , Enterprise Runtime, Core J2EE Framework , CA-FLP-ABA , SAP Fiori Launchpad ABAP Services , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.