Search Results

Follow the steps below to remediate this finding on WordPress. Review plugins that perform redirects (e.g., redirect managers, social login plugins) and verify they do not append sensitive query parameters to the Location URL.Add the following to your theme's ...

Follow the steps below to remediate this finding on Joomla. Review Joomla's Redirect Manager (Components > Redirect) and ensure no sensitive GET parameters are preserved in destination URLs.In custom components, always call $app->redirect($url); followed by ex...

Follow the steps below to remediate this finding on Drupal. Audit any custom redirect logic in hook_form_submit or EventSubscriber implementations.Use the Drupal redirect service:$response = new \Symfony\Component\HttpFoundation\RedirectResponse($url); $respon...

Follow the steps below to remediate this finding on Microsoft IIS webserver. Open IIS Manager and select the site or virtual directory.Double-click Directory Browsing in the Features pane.In the Actions pane on the right, click Disable.Alternatively, in web.co...

Follow the steps below to remediate this finding on Nginx webserver. Ensure the autoindex directive is disabled (it is off by default).In your server or location block, explicitly set:autoindex off;Reload Nginx:sudo systemctl reload nginx

Follow the steps below to remediate this finding on Apache webserver. Remove the Indexes option from the Directory directive in your Apache configuration:<Directory /var/www/html> Options -Indexes </Directory>Alternatively, add the following to your .htaccess ...