Disabling Scripting

By default, scripting in JSP pages is valid. Because scripting can make pages difficult to maintain, some JSP page authors or page authoring groups may want to follow a methodology in which scripting elements are not allowed.

You can disable scripting for a group of JSP pages in an application by setting the scripting-invalid element of the application's deployment descriptor to true. The scripting-invalid element is a child of the jsp-property-group element that defines properties for a set of JSP pages. For information on how to define a group of JSP pages, see Setting Properties for Groups of JSP Pages (page 144). When scripting is invalid, it means that scriptlets, scripting expressions, and declarations will produce a translation error if present in any of the pages in the group. Table 8-1 summarizes the scripting settings and their meanings.

Table 8-1 Scripting Settings 
JSP Configuration
Scripting Encountered
unspecified
Valid
false
Valid
true
Translation Error