When it comes to security we always thing about EJB and other Java security related APIs. But web.xml itself provides you BASIC security control over you web application. If your application is not using any EJB and you need a security control, then web.xml is there to help you .
Read the entire article at: http://passion4java.blogspot.com/2009/12/securing-your-application-using-webxml.html
