OWASPASVS 5.0 requirement

ASVS-V13.4.3 Web servers do not expose directory listings to clients unless explicitly intended.

L2 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V13 Configuration
Section
V13.4 Unintended Information Leakage
Level
L2 (requirement applies from this verification level up)

Requirement

Verify that web servers do not expose directory listings to clients unless explicitly intended.