tomcat 禁止某些文件（夹）的访问

      
        <!--
      
      
         不允许访问的文件以及文件夹 
      
      
        -->
      
      
        <
      
      
        security-constraint
      
      
        >
      
      
        <
      
      
        display-name
      
      
        >
      
      Tomcat Server Configuration Security Constraint
      
        </
      
      
        display-name
      
      
        >
      
      
        <
      
      
        web-resource-collection
      
      
        >
      
      
        <
      
      
        web-resource-name
      
      
        >
      
      Protected Area
      
        </
      
      
        web-resource-name
      
      
        >
      
      
        <
      
      
        url-pattern
      
      
        >
      
      /freeMarker/*
      
        </
      
      
        url-pattern
      
      
        >
      
      
        </
      
      
        web-resource-collection
      
      
        >
      
      
        <
      
      
        auth-constraint
      
      
        >
      
      
        <
      
      
        role-name
      
      
        >
      
      admin
      
        </
      
      
        role-name
      
      
        >
      
      
        </
      
      
        auth-constraint
      
      
        >
      
      
        </
      
      
        security-constraint
      
      
        >