The whole purpose of putting JSPs under WEB-INF is to disallow directly addressing them. This is a good practice as the JSPs should only be available via their
servlet controllers -- you
can forward to JSPs under WEB-INF.
If that's not what you want, don't put them there.