Any content you reference in your portlet code (within Java or a JSP) you can place into WEB-INF, but anything that will be referenced via a URL embedded in an html document sent to the browser will need to remain outside of WEB-INF. Thus you might have to leave the css, javascripts and images outside WEB-INF. One possible alternative is to place these items into CMS and access them from there; you can even apply access control to them so they cannot be accessed except by people logged into the portal. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4138111#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...