Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a website like http://example.com but the problem with it is that people are able to get access to my JavaScript by pointing a browser to http://example.com/js/.

I have little knowledge of using .htaccess files.

share|improve this question

To prevent directory listings when a directory is requested (that doesn't contain a DirectoryIndex) you can add the following to your .htaccess file in the root of your site:

Options -Indexes

This will result in a 403 Forbidden being served for http://example.com/js/, rather than the server generating a directory listing.

As Jobin Jose suggests, you can add a (blank) index.html to these folders (the DirectoryIndex document). However, you will need to do this for every folder and this will serve a blank page (or whatever you decide to put in index.html), returning a successful HTTP status (200 - OK).

However, you can't reliably block users from viewing your JavaScript files that you are referencing in your client-side pages.

share|improve this answer

Simply add an index.html (with no content) in your js folder.

that will prevent listing of your js files in the browsers.

no need of htaccess usage here. This will prevent your js file listing only access with proper js file names.

Hope its helps..

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.