The webconsole.html will be displayed even if you set devMode parameters to false, and even if the debugging interceptor is not in the interceptor packages at all!
The struts 2 webconsole.html is displayed because struts loads it as an static resource. Please have a look at DefaultStaticContentLoader
By examining the loaded webconsole.html I find that it will not work, even if you try to fix it by some JavaScript changes, the DebuggingInterceptor will not accept any data from this page if the struts is not in the devMod.
The @RajeevRanjan works fine. Just add:
If you want nothing to be accessed you must add the css and js which is used by this interceptor
I think this should/could be fixed please see https://issues.apache.org/jira/browse/WW-4601.