Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [cross-project-issues-dev] JustJ JREs and download.eclipse.org Browsing

Christoph,

Certain that's a general issue but specifically for download.eclipse.org there are a great many mirrors:

https://download.eclipse.org/oomph/archive/mirror.php?location=

And at least some of these show the folder content without automatically redirecting to an index.html or index.php, e.g.,

http://ftp.fau.de/eclipse/eclipse/

So anyone relying on this to actually hide (not hide actually but make it difficult to discover) folder content would also need to be sure that such content isn't mirrored.

So I doubt this is a concern for download.eclipse.org specifically.

On 03.06.2020 10:49, Christoph Läubrich wrote:
Just a note on your goody change:

> It has the advantage that you can browse folder content even
> if there is an index.html or index.php in that folder

It is common in web development to have a dummy index file to prevent browsing/discovery of files in a folder, so your solution might disclose otherwise (intentionally) hidden content.


Back to the top