For #1995: requests to .jsp must remain external

- this is only used by JSP samples right now