Investigate solutions fir Access Control Bypass issues with jsp tags

_From [chrisisbeef](https://code.google.com/u/chrisisbeef/) on December 04, 2009 20:56:45_

It is possible to access restricted resources and bypass access control on
those resources on pages that use the jsp forward and include tags.

Ref: https://lists.owasp.org/pipermail/owasp-esapi/2009-December/001672.html

_Original issue: http://code.google.com/p/owasp-esapi-java/issues/detail?id=71_
