How to avoid listing files under jsp directory on Tomcat?
In Tomcat 4.x and upper versions, the Default Servlet serves static content. The Tomcat Functional Specifications require that implementations accept several parameters–including one that indicates whether to provide directory listings when a directory without welcome files is requested. To suppress directory listings in Tomcat, set the value of the servlet’s initialization parameter listings to false in Tomcat’s default deployment descriptor ($CATALINA_HOME/conf/web.xml).
