When
applets are deployed in a web application, the applet class files are placed in the same directory as the HTML file or in a sub-directory. But, by doing this, the applet class file can be accessed by the client directly. My question is-- is there a way to place the applet class file under WEB-INF/classes(so that it's prevented from direct access) and still get it to work. I couldn't get it to work that way. Also, the "codebase" attribute in the <applet> tag can't be of any help here--am I right?