Protecting assets folder

Content

Hi,

Is there a way to whitelist the assets folder? Oracle currently say it's left open so that the site can use the files. I'm *really* struggling to understand this answer.

Is there anyway to do it? Are there any other viable suggestions to store sensitive files on the site without having to upload into the agent desktop as object records or attachments