Prevent exposed web.xml under WEB-INF

[dwiardiirawan]

Hi All,

I have an issue regarding wildfly exposing my web.xml through internet.

my directory structure

src

---main

     ---webapp

          ---WEB-INF

                    ---web.xml

when I try to access directly www.example.com/WEB-INF/web.xml, it show the context of the web.xml

is there any configuration we can do to prevent this?

thank you

Dwi Ardi Irawan

[ctomc]

WildFly does NOT do that.

when you deploy your application it is packed in myapp.war/WEB-INF/web.xml and whole WEB-INF is protected.

maybe you are using exploded deployment and apache/nginx in front that is serving directly from this folder?