j2ee: JSP Expression Language - setup [5/27]

In a JSP 2.0 container, you have some control over the EL.

To turn it off:

• in a webapp - if you use a 2.3 web.xml file, it is disabled
• in web.xml, you can turn it off for a set of JSPs using the jsp-property-group element
• in a page - use the isELEnabled attribute of the page directive
• in a page - replace $ with $ , or use \${ instead of ${

You can also turn off scriptlets for a set of JSPs using the jsp-property-group element of web.xml

Examples:

disabling EL:

        <jsp-property-group>
            <url-pattern>*.jsp</url-pattern>
            <el-ignored>true</el-ignored>
        </jsp-property-group>
        

disabling scripting:

        <jsp-property-group>
            <url-pattern>*.jsp</url-pattern>
            <scripting-invalid>true</scripting-invalid>
        </jsp-property-group>