roshnet/cors-proxy-server

fix/security: http.FileServer lists directory

Opened this issue 5 years ago · 0 comments

roshnet commented 5 years ago

Using http.FileServer works well, but reveals directory content if the URL is tampered with.

Possible options

Maybe try http.ServeFile instead (given it's dangerous theoretically)?
Write own custom handler to serve static files?
IDK!