Problem: If at all the directory browsing is enable, the user who is browsing your website can see the files list in the subfolders and able to access the files which ever he can see in the page.
To disable Directory browsing / file listing go through the modifications mentioned below
Files to Modify: web.xml
Location of File: Locate it in ..../deploy/jbossweb-tomcatXXX.sar/conf/
(*Note - Tomcat version may change depeding on the version of Jboss)
Modifications:
Before -
After -