In <jsp-property-group> element you can use <url-pattern> tag where you specify the resources that the <scripting-invalid> tag refers to.
If you put *.jsp in <url-pattern> than you disable scripting in ALL
JSP's in your app, however you can ALSO apply it to one jsp page (eg. /someCat/myPage.jsp) or some pages in a certain catalogue (eg. /someCat/*).