Security: Prevent directory indexing globally (no reason to enable it for web requests) - refs BT#22085

Author: ywarnier

.htaccess

@@ -126,5 +126,9 @@ RedirectMatch 403 ^/main/inc/lib/javascript/bigupload/files
 </IfModule>
 
 <Files "web.config">
-    Require all denied
-</Files>
+  Require all denied
+</Files>
+
+<IfModule mod_autoindex.c>
+  Options -Indexes
+</IfModule>

documentation/installation_guide.html

@@ -773,6 +773,9 @@ <h3>Apache RewriteRules</h3>
   <Files "web.config">
     Require all denied
   </Files>
+  <IfModule mod_autoindex.c>
+    Options -Indexes
+  </IfModule>
     </pre>
 
     <h4>Special note on sharing questions between courses</h4>
@@ -872,6 +875,7 @@ <h3>Nginx</h3>
     deny all;
     return 403;
   }
+  autoindex off;
     </pre>
 
     <h3>Apple on OS X servers</h3>