I have noted that in default Magento .htaccess the /errors/ folder is accessible and open it in a browser list the content of the folder.
How to address it ?
Options -Indexes to the main
.htaccess is safe ?
Magento Stack Exchange is a question and answer site for users of the Magento e-Commerce platform. It only takes a minute to sign up.Sign up to join this community
errors folder should not be accessible. See an example here. Most probably you are missing something in the
.htaccess file. Try to get one from the fresh Magento copy.
Also make sure that you have this
.htaccess file inside the
<FilesMatch "\.(xml|phtml)$"> Deny from all </FilesMatch>