As per security reasons, you should throw "404" for hidden directories. I also checked few answers on stack overflow suggesting showing 404 page on 403, but that i
