Jsp: how to hide website structure from users?

Question

how to hide website folder structure from users. I developed a website based on the jave platform (jsp). The site is hosted on jboss. suppose the url of my website homepage

dummy.com/dummyFolder/dummy1.jsp

user can view all jsp pages on a website by going to the url

dummy.com/dummyFolder/

What should I do to prevent the user from viewing the structure of my website?

Answer 1

In a standard web.xmlapplication server, you need to disable the directory list function. In the case of JBoss AS (specifically: Tomcat) you need to set the parameter to :DefaultServlet listingsfalse

<init-param>
    <param-name>listings</param-name>
    <param-value>false</param-value>
</init-param>