By default directory listing is enabled in Tomcat 5. This is fine for development purposes but not desirable in production deployments.
To disable this for the entire tomcat server go to $CATALINA_HOME/conf/web.xml and set the listings parameter to false.
In Tomcat 6 the default value is false.
Labels: