Why do you insist on storing the images/jsp in the WEB-INF directory?

Files within /WEB-INF/ (and /META-INF/) will not be directly served to
an HTTP request. This prevents access to your code and configuration.

Usually what you have is a front (or fat) controller servlet that
handles the request and forwards onto the view part of the code in a JSP
within /WEB-INF/. You should take care not to allow the servlet to just
forward to anything within /WEB-INF/. If you just want a file to be
returned to the browser as is, without intervention of a front
controller, don't put it in /WEB-INF/.

Tom Hawtin

bbulsara23@hotmail.com said:

As Moiristo already commented, by placing something under /WEB-INF/
you are prohibiting any direct browser access to the file. Either:
- write a servlet to handle all access to f.ex. /images/*, and
 have the servlet parse the request and return an appropriate image
 (however, if the images are static files to begin with, I don't
  see any value for this)
- move the /images/ directory to top level of your application (so,
 to the same level with /WEB-INF/, not to underneath /WEB-INF/),
 and access them as http://server:port/application/images/img.gif

Then, if you really need to have your servlets load resources from
wihtin /WEB-INF/ (so, you need some data visible to your servlets,
but not directly downloadable by any browser or other web client),
then use ServletContext.getResource() or
ServletContext.getResourceAsStream() .