title: How to deny direct access to an xml file in the server
body: <p>I have an html file <strong>index.html</strong> (in my server say abc.com) which accesses <strong>xyz.js</strong> like </p>
  
  <pre><code>&lt;script type="text/javascript" src="xyz.js"&gt;&lt;/script&gt;
  </code></pre>
  
  <p>The javascript file in turn accesses <strong>data.xml</strong> file.
  The files <strong>index.html,xyz.js</strong> and <strong>data.xml</strong> are in the same folder.</p>
  
  <p>How can I deny direct access to <strong>xyz.js</strong> and <strong>data.xml</strong> if a user types 
  <strong>abc.com/xyz.js</strong>  and <strong>abc.com/data.xml</strong> in the browser.
  Needless to say <strong>index.html</strong> must be able to access these files.</p>
  
  <p>How can I do this(preferably with <strong>.htaccess</strong>)</p>