This is a Java servlet filter (as per Servlet API 2.3). This filter lets you protect some files on your server (web application) from the direct access. For example in your Struts application you need to prohibit the direct access to JSP files etc.