Thank you for the replay.
I found out that, in some page, we are using a following code
String url= dynamic value(In this case: WEB-INF/web.xml)
<
jsp:include page='<%=url %>' flush="true"></jsp:include><br>
so when the url pointing to web.xml, it is displaying its content.