diff --git a/test/bridge-tck/bridge-tck-lifecycle-set-portlet/src/main/webapp/WEB-INF/web-liferay.xml b/test/bridge-tck/bridge-tck-lifecycle-set-portlet/src/main/webapp/WEB-INF/web-liferay.xml
index 24a9a61648..49225f90eb 100644
--- a/test/bridge-tck/bridge-tck-lifecycle-set-portlet/src/main/webapp/WEB-INF/web-liferay.xml
+++ b/test/bridge-tck/bridge-tck-lifecycle-set-portlet/src/main/webapp/WEB-INF/web-liferay.xml
@@ -75,4 +75,19 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
diff --git a/test/bridge-tck/bridge-tck-lifecycle-set-portlet/src/main/webapp/WEB-INF/web.xml b/test/bridge-tck/bridge-tck-lifecycle-set-portlet/src/main/webapp/WEB-INF/web.xml
index 0996b2be0d..e49b0dc440 100644
--- a/test/bridge-tck/bridge-tck-lifecycle-set-portlet/src/main/webapp/WEB-INF/web.xml
+++ b/test/bridge-tck/bridge-tck-lifecycle-set-portlet/src/main/webapp/WEB-INF/web.xml
@@ -60,4 +60,19 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-geronimo.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-geronimo.xml
index 910aca4a17..bcf04944cc 100644
--- a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-geronimo.xml
+++ b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-geronimo.xml
@@ -173,6 +173,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-glassfish.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-glassfish.xml
index a2503dfa63..e2273ded6f 100644
--- a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-glassfish.xml
+++ b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-glassfish.xml
@@ -173,6 +173,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jboss.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jboss.xml
index c4383c1648..20b5e31d2b 100644
--- a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jboss.xml
+++ b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jboss.xml
@@ -173,6 +173,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jetty.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jetty.xml
index 6f140cc683..7fd11ef67c 100644
--- a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jetty.xml
+++ b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jetty.xml
@@ -173,6 +173,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jonas.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jonas.xml
index 6b7b1512cf..853e116dbb 100644
--- a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jonas.xml
+++ b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-jonas.xml
@@ -173,6 +173,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-resin.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-resin.xml
index abb7a3be87..f882c985c0 100644
--- a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-resin.xml
+++ b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-resin.xml
@@ -173,6 +173,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-tomcat.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-tomcat.xml
index 7641c4c4e5..83b39fc4a8 100644
--- a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-tomcat.xml
+++ b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-tomcat.xml
@@ -205,6 +205,20 @@
   	<url-pattern>/tests/*</url-pattern>
   </servlet-mapping>
   <!-- END: LIFERAY PORTAL -->
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-weblogic.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-weblogic.xml
index 127b0a014c..a034228be8 100644
--- a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-weblogic.xml
+++ b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-weblogic.xml
@@ -173,6 +173,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-websphere.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-websphere.xml
index 67afdbd7a0..209854131d 100644
--- a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-websphere.xml
+++ b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-liferay-websphere.xml
@@ -173,6 +173,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-
+	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-pluto-tomcat.xml b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-pluto-tomcat.xml
index d43affa204..6c297313a3 100644
--- a/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-pluto-tomcat.xml
+++ b/test/bridge-tck/bridge-tck-main-portlet/src/main/webapp/WEB-INF/web-pluto-tomcat.xml
@@ -153,6 +153,20 @@
     <servlet-name>nonFacesResource</servlet-name>
     <url-pattern>/tck/*</url-pattern>
   </servlet-mapping>
-  
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-render-policy1-portlet/src/main/webapp/WEB-INF/web-liferay.xml b/test/bridge-tck/bridge-tck-render-policy1-portlet/src/main/webapp/WEB-INF/web-liferay.xml
index 067b24fe48..e0e50666e1 100644
--- a/test/bridge-tck/bridge-tck-render-policy1-portlet/src/main/webapp/WEB-INF/web-liferay.xml
+++ b/test/bridge-tck/bridge-tck-render-policy1-portlet/src/main/webapp/WEB-INF/web-liferay.xml
@@ -75,5 +75,20 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-render-policy1-portlet/src/main/webapp/WEB-INF/web.xml b/test/bridge-tck/bridge-tck-render-policy1-portlet/src/main/webapp/WEB-INF/web.xml
index 80d21176be..34a2cac6ca 100644
--- a/test/bridge-tck/bridge-tck-render-policy1-portlet/src/main/webapp/WEB-INF/web.xml
+++ b/test/bridge-tck/bridge-tck-render-policy1-portlet/src/main/webapp/WEB-INF/web.xml
@@ -60,5 +60,20 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-render-policy2-portlet/src/main/webapp/WEB-INF/web-liferay.xml b/test/bridge-tck/bridge-tck-render-policy2-portlet/src/main/webapp/WEB-INF/web-liferay.xml
index 459b819ce1..3b46b84cf7 100644
--- a/test/bridge-tck/bridge-tck-render-policy2-portlet/src/main/webapp/WEB-INF/web-liferay.xml
+++ b/test/bridge-tck/bridge-tck-render-policy2-portlet/src/main/webapp/WEB-INF/web-liferay.xml
@@ -75,5 +75,20 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-render-policy2-portlet/src/main/webapp/WEB-INF/web.xml b/test/bridge-tck/bridge-tck-render-policy2-portlet/src/main/webapp/WEB-INF/web.xml
index ac553d5d4d..7365c7015f 100644
--- a/test/bridge-tck/bridge-tck-render-policy2-portlet/src/main/webapp/WEB-INF/web.xml
+++ b/test/bridge-tck/bridge-tck-render-policy2-portlet/src/main/webapp/WEB-INF/web.xml
@@ -60,5 +60,20 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-render-policy3-portlet/src/main/webapp/WEB-INF/web-liferay.xml b/test/bridge-tck/bridge-tck-render-policy3-portlet/src/main/webapp/WEB-INF/web-liferay.xml
index 323979caa3..ea292d72fe 100644
--- a/test/bridge-tck/bridge-tck-render-policy3-portlet/src/main/webapp/WEB-INF/web-liferay.xml
+++ b/test/bridge-tck/bridge-tck-render-policy3-portlet/src/main/webapp/WEB-INF/web-liferay.xml
@@ -75,5 +75,20 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-render-policy3-portlet/src/main/webapp/WEB-INF/web.xml b/test/bridge-tck/bridge-tck-render-policy3-portlet/src/main/webapp/WEB-INF/web.xml
index 9e1ec539d5..d67bfabc05 100644
--- a/test/bridge-tck/bridge-tck-render-policy3-portlet/src/main/webapp/WEB-INF/web.xml
+++ b/test/bridge-tck/bridge-tck-render-policy3-portlet/src/main/webapp/WEB-INF/web.xml
@@ -60,5 +60,20 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
 
diff --git a/test/bridge-tck/bridge-tck-response-wrapper-portlet/src/main/webapp/WEB-INF/web-liferay.xml b/test/bridge-tck/bridge-tck-response-wrapper-portlet/src/main/webapp/WEB-INF/web-liferay.xml
index 4e28b759fd..778607950c 100644
--- a/test/bridge-tck/bridge-tck-response-wrapper-portlet/src/main/webapp/WEB-INF/web-liferay.xml
+++ b/test/bridge-tck/bridge-tck-response-wrapper-portlet/src/main/webapp/WEB-INF/web-liferay.xml
@@ -75,4 +75,19 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>
diff --git a/test/bridge-tck/bridge-tck-response-wrapper-portlet/src/main/webapp/WEB-INF/web.xml b/test/bridge-tck/bridge-tck-response-wrapper-portlet/src/main/webapp/WEB-INF/web.xml
index 942b1a548d..2534636ee8 100644
--- a/test/bridge-tck/bridge-tck-response-wrapper-portlet/src/main/webapp/WEB-INF/web.xml
+++ b/test/bridge-tck/bridge-tck-response-wrapper-portlet/src/main/webapp/WEB-INF/web.xml
@@ -60,4 +60,19 @@
     <servlet-name>faces</servlet-name>
     <url-pattern>*.jsf</url-pattern>
   </servlet-mapping>
+  	<!-- BEGIN: LIFERAY FACES BRIDGE -->
+	<!-- Prevent direct access to Facelet view XHTML by the userAgent (browser). -->
+	<security-constraint>
+		<web-resource-collection>
+			<web-resource-name>Facelet View XHTML</web-resource-name>
+			<url-pattern>*.xhtml</url-pattern>
+		</web-resource-collection>
+		<auth-constraint>
+			<role-name>nobody</role-name>
+		</auth-constraint>
+	</security-constraint>
+	<security-role>
+		<role-name>nobody</role-name>
+	</security-role>
+	<!-- END: LIFERAY FACES BRIDGE -->
 </web-app>