If the index allows browsing to a parent directory ( ../ ), attackers might navigate to system folders, logs, or other sensitive locations.
If you’re running a site and want to prevent your files from being indexed, you have two main options: index of files