Exposure of directory listing using Serve / ServeFS GO-S1035

A directory listing is inappropriately exposed using github.com/gin-gonic/gin's Serve / ServeFS, yielding potentially sensitive information to attackers.

Bad practice

package main

import (
    "github.com/gin-gonic/gin"
)

func main() {
    router := gin.Default()
    router.Static("/static", "./static")
}

References

• OWASP A1:2021
• CWE-548