<c:url> will not access resources under WEB-INF or its subdirectories.
<c:url> isn't designed to access anything; it just prints out a URL or stores it as a scoped variable, possibly assembling its <c:param> children.
*** Bug 8049 has been marked as a duplicate of this bug. ***