Home | Download | PDF | API | FAQ | Search | Feedback | History

> ## Disabling Scripting

> By default, scripting in JSP pages is valid. Because scripting can make pages difficult to maintain, some JSP page authors or page authoring groups may want to follow a methodology in which scripting elements are not allowed.

> You can disable scripting for a group of JSP pages in an application by setting the `scripting-invalid` element of the application's deployment descriptor to `true`. The `scripting-invalid` element is a child of the `jsp-property-group` element that defines properties for a set of JSP pages. For information on how to define a group of JSP pages, see Setting Properties for Groups of JSP Pages (page 144). When scripting is invalid, it means that scriptlets, scripting expressions, and declarations will produce a translation error if present in any of the pages in the group. Table 8-1 summarizes the scripting settings and their meanings.

> Table 8-1 Scripting Settings
> JSP Configuration | Scripting Encountered
> --- | ---
> unspecified | Valid
> `false` | Valid
> `true` | Translation Error