Disabling directory listing in Zeppelin

Question

Has anyone blocked the directory list in Zeppelin 0.6.0 (or another version) as part of security measures?

Could you tell me about this.

Answer 1

Following " How to disable the directory listing for WebAppContext Jetty ? , I looked at the Apache Zeppelin installation directory, identified the file, web.xmland added

<param-name>dirAllowed</param-name>
<param-value>false</param-value>

After the reboot, it looked like the configuration parameter was not selected. A list of directories was still possible.

In my understanding, ZEPPELIN-2014 and commit will require a patch to provide this configuration or activation ZeppelinServer.java.

It will be fixed as from Zeppelin 0.7.3 or 0.8.0.