Customer security team discovered that many folders in openshift-console are browsable. Can you please remove the listing permissions from these folders (or globally)?

Hera are some examples:
https://console-openshift-console.apps.<domain>/static/dev-console/
https://console-openshift-console.apps.<domain>/static/helm-plugin/
https://console-openshift-console.apps.<domain>/static/topology/

Tested on OCP 4.12.0 but I guess it affects all versions of the OCP web console

Open the URLs with curl or a web browser and check that directory/files are listed

1.
2.
3.

Directories and files are listed

Web server should return a forbidden error