title: Google app engine: what are content folder data securing options?
body: <p>It seems for me that when youve got low (in general hacking terms) quotas (I am talking about free GAE plan) and quite large files uoy wanna stream to your users youmust somehow to protect thouse files from "bad" users</p>
  
  <p>So it is sad </p>
  
  <blockquote>
    <p>By default, App Engine makes all files
    in the WAR available as static files
    except JSPs and files in WEB-INF/. Any
    request for a URL whose path matches a
    static file serves the file directly
    to the browser—even if the path also
    matches a servlet or filter mapping.matches a servlet or filter mapping.</p>
  </blockquote>
  
  <p>what are short in implementing methods of folder protection inside WAR? (code, samples, articles examples etc)</p>
  
  <p>(situation: We use GAE for Java. So we just are programming JSP and Java and xml and JS and Html. So: empty gae project, no source yet (just some default html) a folder 'data' in  that war with some files that should not get into bad hands)</p>