In fact, on reviewing this, I think your above filter should be something like
<filter-mapping>
<filter-name>CFClickJackFilterDeny</filter-name>
<url-pattern>/mer/nao/app_v4/*</url-pattern>
</filter-mapping>
In fact, on reviewing this, I think your above filter should be something like
<filter-mapping>
<filter-name>CFClickJackFilterDeny</filter-name>
<url-pattern>/mer/nao/app_v4/*</url-pattern>
</filter-mapping>