I got my Google Mobilegeddon report and noticed that it had flagged all the wp-content directory pages of my WordPress blog. Which should not have been available on the web at all.

Seems directory browsing is allowed by default by most web servers. I would have thought that my hosting company would have disabled this…

The trick is to add the following line to your .htaccess:

Options All -Indexes

The Options directive controls what is available for the directory. The Indexes option to this directive results in a formatted listing of the directory, and the - essentially disables this.

A quick edit of my .htaccess and all is well.

http://www.wpsuperstars.net/how-to-disable-directory-browsing-wordpress/