Related link: http://jcp.org/jsr/detail/154.jsp

JCP posts Java Servlet 2.4 final draft and JSP 2.0 proposed final draft. The Java Servlet 2.4 specification defines new Permission classes for satisfying the J2EE role-based authorization model, while the JSP 2.0 includes the ability to write taglibs without java, the addition of an expression language, requirement of J2EE 1.4, JSP fragments, a simpler tag invocation protocol, and more.