JSP 禁用脚本设置

时间：2023-03-09 08:29:00
JSP 禁用脚本设置

JSP 禁用脚本设置：

web.xml:

<?xml version="1.0" encoding="UTF-8"?>

<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee"

    xsi:schemaLocation="http://java.sun.com/xml/ns/javaee

    http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" id="WebApp_ID" version="3.0">

    <display-name>TestBootWeb</display-name>

    <jsp-config>

        <jsp-property-group>

            <url-pattern>/index006.jsp</url-pattern> 或者写成*.jsp

            <scripting-invalid>true</scripting-invalid>

        </jsp-property-group>

    </jsp-config>

    <welcome-file-list>

        <welcome-file>index.jsp</welcome-file>

    </welcome-file-list>

</web-app>

参考：

http://javaeedevelop.iteye.com/blog/1533705

相关文章