HTML source code commonly reveals directory structures through paths in script tags, link tags for stylesheets, image sources, and anchor hrefs. These expose the site's file organization. Physical security measures (B), alarm codes (C), and password policies (D) are operational security details not embedded in HTML.