From df27ccf01d9b89149fbba00e81c3eed078e28a95 Mon Sep 17 00:00:00 2001
From: Uwe Schindler <uschindler@apache.org>
Date: Wed, 17 Apr 2019 11:04:13 +0200
Subject: [PATCH] SOLR-13409: Disable HTML directory listings in admin
 interface to prevent possible security issues

---
 solr/CHANGES.txt               | 2 ++
 solr/server/etc/webdefault.xml | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/solr/CHANGES.txt b/solr/CHANGES.txt
index 1aaefc5f8ee..326663a231f 100644
--- a/solr/CHANGES.txt
+++ b/solr/CHANGES.txt
@@ -274,6 +274,8 @@ Other Changes
 
 * SOLR-13366: Clarify 'Invalid stage name' warning logging in AutoScalingConfig (Christine Poerschke)
 
+* SOLR-13409: Disable HTML directory listings in admin interface to prevent possible security issues (Uwe Schindler)
+
 ==================  8.0.0 ==================
 
 Consult the LUCENE_CHANGES.txt file for additional, low level, changes in this release.
diff --git a/solr/server/etc/webdefault.xml b/solr/server/etc/webdefault.xml
index b987eac26ba..f0882926a90 100644
--- a/solr/server/etc/webdefault.xml
+++ b/solr/server/etc/webdefault.xml
@@ -127,7 +127,7 @@
     </init-param>
     <init-param>
       <param-name>dirAllowed</param-name>
-      <param-value>true</param-value>
+      <param-value>false</param-value>
     </init-param>
     <init-param>
       <param-name>welcomeServlets</param-name>