Shield Tomcat directory list function
By default, if you visit a web app under Tomcat, if you entered a directory name, and there is no available Welcome file in this directory, then Tomcat will list all the files in the directory, if You want to mask this default behavior, then modify the conf / web.xml file, will:
init-param>
init-param>
servlet>
change into
init-param>
init-param>
servlet>