Hi CasyBala,
As far as I know, the xap file is hosted on ASP.NET application and when we open this ASP.NET web page, the xap file will be downloaded automatically. It is the default action for Silverlight application, because the xap file must be downloaded before the
Silverlight application running.
If you want to prevent downloading xap file when user directly types the url to protect the xap file content, I suggest you could add a Login page in your ASP.NET application where Silverlight xap hosted. It could let the users need to login first and then
have the permission to download the xap file.
Best Regards,
Weiwei
MSDN Community Support
Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to
MSDN Support, feel free to contact MSDNFSF@microsoft.com.