[Zope] security hole

accessing a zope site with nautilus can show you the whole structure: folders, methods and documents. On some sites you see the source of index_html. I didn't figure out, what makes the difference.