Fix the vulnerbility caused by jetty-webapp
Fix the vulnerbility caused by jetty-webapp

### What changes are proposed in this pull request?
Fix https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34429
see:
https://github.com/eclipse/jetty.project/security/advisories/GHSA-vjv5-gp2w-65vm

### Why are the changes needed?
The default compliance mode allows requests with URIs that contain a
%u002e segment to access protected resources within the WEB-INF
directory. For example, a request to /%u002e/WEB-INF/web.xml can
retrieve the web.xml file. This can reveal sensitive information
regarding the implementation of a web application. Similarly, an encoded
null character can prevent correct normalization so that
/.%00/WEB-INF/web.xml cal also retrieve the web.xml file.

### Does this PR introduce any user facing changes?

no

pr-link: Alluxio/alluxio#15668
change-id: cid-6f5001b88fa1c4cbab1e28cb30fe50fc47da9a93
Alluxio/alluxio,wwjiang007/alluxio,Alluxio/alluxio,wwjiang007/alluxio,Alluxio/alluxio,wwjiang007/alluxio,Alluxio/alluxio,wwjiang007/alluxio,Alluxio/alluxio,wwjiang007/alluxio,Alluxio/alluxio,wwjiang007/alluxio,wwjiang007/alluxio,wwjiang007/alluxio,Alluxio/alluxio,Alluxio/alluxio,Alluxio/alluxio,wwjiang007/alluxio,Alluxio/alluxio,wwjiang007/alluxio