> XSLT has output methods for XML, HTML, and text. JSP isn't
> XML and it isn't HTML, so achieving this is messy.
> Disable-output-escaping isn't supported for attributes. You
> can use d-o-e to hand-serialize the entire element. In XSLT
> 2.0, character maps should handle this reasonably well, by
> assigning substitution characters to the strings <% and %>
> and perhaps '"'. But the bottom line is that this isn't an
> output format that's directly supported.

There is an XML syntax for JSP now, eg:

<%= .. is now <jsp:expression>

<% ... is now <jsp:scriptlet>

...should fix all the issues providing the OP can use it.

cheers
andrew