Should I redirect the url to another one?

[Zhixiong Pan]

My application structure will be exposed by the following url. The Audit required a fixing to that web vulnerability. I am not sure if the url redirect can fix that? And how to fix that. Should I create a servlet to redirect that url or there is some other simple way? Thanks.

https://personmaintenance.pp.gm.com/images/

[Jeanne Boyarsky]

Which is the piece of the URL that you are trying to hide from the user? Also, I think audit wants you to change the URL not just mask it. Also if you are doing anything client side, the original URL can still be seen.