I have a JSF application in which the images the user uploads are stored in an FTP directory. The easiest way I found of rendering these images is to put the FTP URL, with username and password in the SRC of the image:
<img src="ftp://user:[email protected]/foto.jpg"/>
However, leaving this URL with user and password exposed is a security risk, and anyone who fires an F12 in the browser can see this information. How can I hide this information to render the image from the FTP server?