title: Direct browsing of a resource
body: <p>Is there possibility of  "Direct browsing of a resource" attack in node js applications and how can I prevent it?</p>
  
  <p><strong>EDIT</strong>: I use express framework</p>