屏蔽web应用下的jsp文件的访问

resion：
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" "http://java.sun.com/dtd/web-app_2_3.dtd">
<web-app>
  <display-name>defaultroot</display-name>
    <servlet servlet-name="resin-jsp"
           servlet-class="com.caucho.server.security.FormLoginServlet">
  </servlet>

  <servlet servlet-name="resin-jspx"
           servlet-class="com.caucho.server.security.FormLoginServlet">
  </servlet>

  <servlet servlet-name="resin-xtp"
           servlet-class="com.caucho.server.security.FormLoginServlet"/>

  <servlet-mapping url-pattern="*.jsp" servlet-name="resin-jsp"/>
  <servlet-mapping url-pattern="*.jspx" servlet-name="resin-jspx"/>
  <servlet-mapping url-pattern="*.xtp" servlet-name="resin-xtp"/>
  <error-page>
     <error-code>500</error-code>
     <location>/500.htm</location>
  </error-page>
</web-app>

tomcat下：

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" "http://java.sun.com/dtd/web-app_2_3.dtd">
<web-app>
  <display-name>defaultroot</display-name>
    <servlet>
        <servlet-name>jsp</servlet-name>
        <servlet-class></servlet-class>
        <init-param>
            <param-name>fork</param-name>
            <param-value>false</param-value>
        </init-param>
        <init-param>
            <param-name>xpoweredBy</param-name>
            <param-value>false</param-value>
        </init-param>
        <load-on-startup>3</load-on-startup>
    </servlet>
    <!-- The mapping for the JSP servlet -->
    <servlet-mapping>
        <servlet-name>jsp</servlet-name>
        <url-pattern>*.jsp</url-pattern>
    </servlet-mapping>

    <servlet-mapping>
        <servlet-name>jsp</servlet-name>
        <url-pattern>*.jspx</url-pattern>
    </servlet-mapping>

    <!-- The mapping for the SSI servlet -->
</web-app>