How to avoid user access to .xhtml page in JSF?

Question

I am new to JSF and writing first simply jsf web app.

URL with .jsf are mapping to .xhtml files in WebContent but why I can open .xhtml in web browser with all jsf t

Answer 1

You could add a security constraint to your web.xml blocking all requests to *.xhtml.

    Restrict raw XHTML Documents
    
        XHTML
        *.xhtml