JSP 禁用脚本设置

JSP 禁用脚本设置：

web.xml:

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee"
    xsi:schemaLocation="http://java.sun.com/xml/ns/javaee 
    http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" id="WebApp_ID" version="3.0">
    <display-name>TestBootWeb</display-name>
    <jsp-config>
        <jsp-property-group>
            <url-pattern>/index006.jsp</url-pattern> 或者写成*.jsp
            <scripting-invalid>true</scripting-invalid>
        </jsp-property-group>
    </jsp-config>
    <welcome-file-list>
        <welcome-file>index.jsp</welcome-file>
    </welcome-file-list>
</web-app>

参考：

http://javaeedevelop.iteye.com/blog/1533705