Disable eval expressions and simple jstl accessibility

afaik the simple jstl accessibility is used only in jsp. Currently we have a hacky interceptor to disable it, would be nice if it were an option.