Salam All,
Actually the user cannot see the JSP code since it is proccessed and resolved at server side.
The user can only see the result of the JSP processing as a HTML page.
Now, how can you prevent the user from not seeing the HTML source ?
By not sending the response at all !
Regards