Prevent direct access to composite components by placing them inside /WEB-INF

Question

I\'m trying to define some composite components in my web application. According to the tutorials i read, i have to place the xhtml files inside a resource folder located in