diff --git a/setup/frames/.htaccess b/setup/frames/.htaccess
new file mode 100644
index 000000000..56baee608
--- /dev/null
+++ b/setup/frames/.htaccess
@@ -0,0 +1,3 @@
+# This folder does not require access over HTTP
+# (the following directive denies access by default)
+Order allow,deny