From 38d62eeb5676d010a08c439fdcedb4741c021bff Mon Sep 17 00:00:00 2001
From: Henri Vasserman <henv@hot.ee>
Date: Fri, 28 Mar 2025 19:52:14 +0200
Subject: Hide directory browsing on the static content (#85)

* Hide directory browsing on the static content

* update changelog
---
 internal/headers.go | 12 ++++++++++++
 1 file changed, 12 insertions(+)

(limited to 'internal')

diff --git a/internal/headers.go b/internal/headers.go
index 9d6ba76..d73fa33 100644
--- a/internal/headers.go
+++ b/internal/headers.go
@@ -4,6 +4,7 @@ import (
 	"log/slog"
 	"net"
 	"net/http"
+	"strings"
 
 	"github.com/TecharoHQ/anubis"
 	"github.com/sebest/xff"
@@ -62,3 +63,14 @@ func XForwardedForToXRealIP(next http.Handler) http.Handler {
 		next.ServeHTTP(w, r)
 	})
 }
+
+// Do not allow browsing directory listings in paths that end with /
+func NoBrowsing(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if strings.HasSuffix(r.URL.Path, "/") {
+			http.NotFound(w, r)
+			return
+		}
+		next.ServeHTTP(w, r)
+	})
+}
-- 
cgit v1.2.3