This is how you turn off directory list for yr Tomcat server.
1. Edit the default servlet in the {$CATALINA_HOME}/conf/web.xml file.
2. Look for the <init-param> section within the <servlet section>
<servlet>
<servlet-name>default</servlet-name>
<servlet-class>
org.apache.catalina.servlets.DefaultServlet
</servlet-class>
<init-param>
<param-name>debug</param-name>
<param-value>0</param-value>
</init-param>
<init-param>
<param-name>listings</param-name>
<param-value>true</param-value>
</init-param>
<load-on-startup>1</load-on-startup>
</servlet>
3. Change the <param-value> to false for the <param-name>listing</param-name> section.
<init-param>
<param-name>listings</param-name>
<param-value>false</param-value>
</init-param>