I dont know, if tomcat  allow that or not,
but you can easily do this by integrating Tomcat with
either Apache or IIS. You can configure IIS by
disabling directory listing. So user could only view
the the HTML files  by using their names and will not
be able to view  directory contents.

Also you can disable guest user access  to that
particular directory.