You can put your JSP's in the WEB-INF, in fact I do it all the time, because I want to hide the raw JSP from the outside world. Anything inside WEB-INF will be hidden and any user going to your...