Java EE (Java Enterprise Edition) General Discussion

Hi,

I'm facing a small issue with a JSP file which is present outside Web-inf directory. It was done for some reason. Everything works fine. The only issue being If we give the URL of the JSP page(which is present outside Web-inf directory) only the path not the JSP file, it opens the link specifying all the JSP page present in this path as the result. Since we have put the JSP file outside web-inf directory we are breaching the security provided by Tomcat. So how to restrict the user from not seeing anything when he specifies the URL. Any idea bout this, I'll be very glad if somebody can let me know how to resolve this.

Thanks,
Sandesh