blocks|key|3190282|text|该指令仅通过http协议控制目录的列表：http://msdn.microsoft.com/en-us/library/ms691327%2528v=vs.90%2529.aspx|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|3190283|尝试从任何其他(甚至是您自己的)应用程序中访问该目录不会对代码产生任何影响。|3190284|@+edit+:在编辑之后，如果我没弄错的话--我想，你所说的“拒绝目录浏览器”指的是预期的功能:使用浏览器显示指定路径中目录的内容。是的，它可能不会在本地开发服务器中工作。在非法入境者身上试试！|3190285|entityMap|0|LINK|mutability|MUTABLE|url|http://msdn.microsoft.com/en-us/library/ms691327%2528v=vs.90%2529.aspx^0|K|1U|0|0|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@$A|Q|B|R|1|S]]|C|$]]|$1|D|3|E|5|6|7|T|8|@]|9|@]|C|$]]|$1|F|3|G|5|6|7|U|8|@]|9|@]|C|$]]|$1|H|3|-4|5|6|7|V|8|@]|9|@]|C|$]]]|I|$J|$5|K|L|M|C|$N|O]]]]

the &lt;directoryBrowse&gt; directive controls the listing of the directory via the http protocol only: 
<a href="http://msdn.microsoft.com/en-us/library/ms691327%28v=vs.90%29.aspx" rel="nofollow">http://msdn.microsoft.com/en-us/library/ms691327%28v=vs.90%29.aspx</a>

It will not have any effect on code, trying to access the directory from within any other (or even your own) application. 

@Edit: after the edit and if I get you right - I think, what you mean by Deny Directory Browser is the intended functionality: show the contents of the dir within a specified path using the browser. And yes, it probably will not work in the local development server. Try it on IIs!

blocks|key|2976571|text|Gibbok，这里没什么问题，不要惊慌:)|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2976572|假设您是从Visual+Studio中的内置服务器浏览您的网站，这通常是正常的情况。|2976573|我非常确定，如果您使用上面的代码迁移到IIS，目录浏览的行为将与您希望的一样。|2976574|试一试，在IIS中托管这个网站，并让我们知道发生了什么，谢谢。|2976575|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|J|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|K|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|L|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|M|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|I|$]]

Gibbok, nothing is wrong here, Don't panic :)

Assuming that you are browsing your website from the built-in server inside Visual Studio, This is typically a normal case.

I'm pretty sure that if you moved to IIS with the above code, Directory browsing will behave just like what you want it to be.

Give it a try and host this website in IIS, and let us know what happened, Thanks.

blocks|key|2976594|text|首先:并不是所有的东西都能在<location>块中工作。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2976595|我找不到<location>中不支持<system.webServer>的肯定说法，但我也找不到任何建议允许它的情况。这方面的证据在(全局)+machine.config中，其中system.webserver部分被定义为使用IgnoreSection处理程序:+ie。它不是由标准System.Configuration实现处理的，而是为<location>提供支持的配置处理的标准实现。|2976596|尝试使用directoryBrowse元素在Cms文件夹中添加web.config，以确认已阻止浏览。|2976597|entityMap^0|E|A|0|4|A|I|I|1Z|E|2H|G|35|D|3X|K|4Q|A|0|4|F|M|3|V|A|0^^$0|@$1|2|3|4|5|6|7|L|8|@$9|M|A|N|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|O|8|@$9|P|A|Q|B|C]|$9|R|A|S|B|C]|$9|T|A|U|B|C]|$9|V|A|W|B|C]|$9|X|A|Y|B|C]|$9|Z|A|10|B|C]|$9|11|A|12|B|C]]|D|@]|E|$]]|$1|H|3|I|5|6|7|13|8|@$9|14|A|15|B|C]|$9|16|A|17|B|C]|$9|18|A|19|B|C]]|D|@]|E|$]]|$1|J|3|-4|5|6|7|1A|8|@]|D|@]|E|$]]]|K|$]]

First: not everything works in a <code>&lt;location&gt;</code> block.

I cannot find a positive statement that <code>&lt;system.webServer&gt;</code> isn't supported in a <code>&lt;location&gt;</code>, but I cannot find any cases where it is suggested that it is allowed. Evidence for this is in the (global) <code>machine.config</code> where the <code>system.webserver</code> section is defined to use the <code>IgnoreSection</code> handler: ie. it isn't processed by the standard <code>System.Configuration</code> implementation, and it is that standard implementation of config handling that provides support for <code>&lt;location&gt;</code>.

Try adding a <code>web.config</code> into the <code>Cms</code> folder with the <code>directoryBrowse</code> element to confirm that browsing is blocked.

blocks|key|2976673|text|我也在尝试同样的代码。你所拥有的实际上是正确的。这是reference。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2976674|当然，它对我不起作用，我也不知道为什么，直到我读了理查德的帖子，才想起有人在那个目录中放了一个web.config文件。该文件将覆盖主web.config文件中的行为。在子目录web.config中，directoryBrowse选项被显式打开(以及许多其他处理程序)。删除这个文件，你上面的工作对我来说是有效的。它实际上将请求传递给下一个处理程序，这正是我想要的。|2976675|我在本地计算机上使用IIS+7。|2976676|entityMap|0|LINK|mutability|MUTABLE|url|http://www.iis.net/ConfigReference/system.webServer/directoryBrowse^0|Q|9|0|0|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@$A|Q|B|R|1|S]]|C|$]]|$1|D|3|E|5|6|7|T|8|@]|9|@]|C|$]]|$1|F|3|G|5|6|7|U|8|@]|9|@]|C|$]]|$1|H|3|-4|5|6|7|V|8|@]|9|@]|C|$]]]|I|$J|$5|K|L|M|C|$N|O]]]]

I was trying the same code. What you have is in fact correct. Here is the <a href="http://www.iis.net/ConfigReference/system.webServer/directoryBrowse" rel="nofollow">reference</a>.

Of course it wasn't working for me and I couldn't figure out why, until I read Richard's post and remembered that someone put a web.config file in that directory. That file overrides the behavior in the main web.config file. In the sub directory web.config the directoryBrowse option was explicitly turned on (as well as a LOT of other handlers, yikes!). Delete that file and what you have above works for me. It actually passes the request along to the next handler, which is exactly what I wanted.

I'm using IIS 7 on my local machine.

I have a WebSite and I woud like Deny Directory Browser from a web.config file.

Here the code I'm using placed in the ROOT.
Does not work. I'm testing it Locally so with URL LIKE <a href="http://localhost:3214/">http://localhost:3214/</a> I can still browser the directory fro CMS.

<ul>
<li>What I'm doing wrong?</li>
<li>Should it work even on Local Machine?</li>
</ul>

Thanks for your support!

<pre><code>&lt;configuration&gt;
 &lt;location path="Cms"&gt;
 &lt;system.webServer&gt;
 &lt;directoryBrowse enabled="false" /&gt;
 &lt;/system.webServer&gt;
 &lt;/location&gt;
&lt;/configuration&gt;
</code></pre>

Some resource:

<a href="http://blogs.iis.net/bills/archive/2008/03/24/how-to-enable-directory-browsing-with-iis7-web-config.aspx">http://blogs.iis.net/bills/archive/2008/03/24/how-to-enable-directory-browsing-with-iis7-web-config.aspx</a>

<a href="http://www.expta.com/2008/03/configuring-virtual-directories-with.html">http://www.expta.com/2008/03/configuring-virtual-directories-with.html</a>

How to disable Directory Browse in Web.Config

Visual Studio

服务器

我有一个WebSite，我想拒绝目录浏览器从一个的web.config文件。在这里，我使用的代码放在根目录中。不起作用。我正在本地测试它，所以使用像这样的网址，我仍然可以浏览CMS的目录。我做错了什么？即使在本地计算机上也应该工作吗？多谢你们的支持!<configuration> <location path="Cm...

问如何在Web.Config中禁用目录浏览
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在Web.Config中禁用目录浏览EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在Web.Config中禁用目录浏览
EN