How to Disable the Scripting on a JSP page

The EL is intended to replace the use of Java scriptlets in developing JSPbased web applications. To this end, it’s possible to disable the evaluation of scriptlets through configuration parameters. This allows a developer to ensure that no one inadvertently uses scriptlets instead of the EL. This can allow best practices to be more easily enforced.

You can disable scriptlets within a page using the web.xml deployment descriptor by choosing to disable evaluation for a single page, a set of pages, or for the entire application. The tags that you need to add to the deployment descriptor are within the element. The following example disables scriptlets for all JSP pages within an application:



*.jsp
true