diff --git a/app/helpers/theme.php b/app/helpers/theme.php
index 9c1dde5..126677d 100644
--- a/app/helpers/theme.php
+++ b/app/helpers/theme.php
@@ -116,9 +116,11 @@ class Theme
             return null;
         }
 
-        // Use the router to generate the URL
+        // Generate URL that goes through index.php
         global $app_root;
-        return "$app_root/app/helpers/theme-asset.php?theme=" . urlencode($themeId) . "&path=" . urlencode($assetPath);
+        // Remove any trailing slash from app_root to avoid double slashes
+        $baseUrl = rtrim($app_root, '/');
+        return "$baseUrl/?page=theme-asset&theme=" . urlencode($themeId) . "&path=" . urlencode($assetPath);
     }
 
 
diff --git a/app/pages/theme-asset.php b/app/pages/theme-asset.php
new file mode 100644
index 0000000..4136034
--- /dev/null
+++ b/app/pages/theme-asset.php
@@ -0,0 +1,10 @@
+<?php
+/**
+ * Theme Asset handler
+ *
+ * Serves theme assets through the main application router.
+ * This provides a secure way to serve theme files that are outside the web root.
+ */
+
+// Include the theme asset handler
+require_once __DIR__ . '/../helpers/theme-asset.php';
diff --git a/public_html/index.php b/public_html/index.php
index 4212279..b988ac3 100644
--- a/public_html/index.php
+++ b/public_html/index.php
@@ -145,7 +145,7 @@ $allowed_urls = [
     'conferences','participants','components',
     'graphs','latest','livejs','agents',
     'profile','credentials','config','security',
-    'settings','theme',
+    'settings','theme','theme-asset',
     'status',
     'help','about',
     'login','logout',