Directory listing occurs when a web server displays the contents of a folder. This can expose plugin structures, temporary files, backups, and hidden scripts.
Attackers can use these listings to map your environment. Steel Security recommends disabling directory listing at the server level to prevent information disclosure.
Where automatic changes are not possible, server-level fallback guidance helps ensure the protection can still be applied safely.