I am facing this issue for my angular app.
Dist version of app, does not restrict the direct folder access.
so www.mysite.com/scripts and /images and /styles folder are accessible.
This issue is not coming in development i.e. grunt serve this is coming in grunt serve:dist.
I have tried the deny folder using .htaccess of dist folder. but doesn't help