---
title: Disable Directory Browsing
impact: MEDIUM
impactDescription: prevents information disclosure
tags: configuration, information-disclosure, security, csharp
---

## Disable Directory Browsing

Directory browsing allows attackers to verify file existence and structure.

**Incorrect (enabled):**

```csharp
app.UseDirectoryBrowser(); // Dangerous in production
```

**Correct (disabled):**

```csharp
// Remove UseDirectoryBrowser() call.
// Only use StaticFiles
app.UseStaticFiles();
```

**Tools:** Manual Review